* Re: what traffic is this?
@ 2002-06-26 13:25 JHoskins98
2002-06-26 14:53 ` Tony Earnshaw
2002-06-26 14:58 ` LuisMi
0 siblings, 2 replies; 10+ messages in thread
From: JHoskins98 @ 2002-06-26 13:25 UTC (permalink / raw)
To: netfilter
[-- Attachment #1: Type: text/plain, Size: 1017 bytes --]
The traffic is CDP - Cisco Discovery Protocol. It is a heartbeat to detect
changes i.e. newly attached or detacted cisco equipment.
You can turn it off with "no cdp run" command at the enable prompt or "no cdp
enable" at the interface.
jhh
In a message dated 6/26/2002 7:37:06 AM Eastern Standard Time,
netfilter-request@lists.samba.org writes:
> This traffic comes from a cisco router.
> what type of traffic is ?
>
> [root@cuelebre root]# tcpdump -i eth2
> tcpdump: listening on eth2
>
> 13:19:12.640000 0:4:dd:c:42:a6 0:4:dd:c:42:a6 loopback 60:
> 0000 0100 0000 0000 0000 0000 0000 0000
> 0000 0000 0000 0000 0000 0000 0000 0000
> 0000 0000 0000 0000 0000 0000 0000
> 13:19:22.640000 0:4:dd:c:42:a6 0:4:dd:c:42:a6 loopback 60:
> 0000 0100 0000 0000 0000 0000 0000 0000
> 0000 0000 0000 0000 0000 0000 0000 0000
> 0000 0000 0000 0000 0000 0000 0000
[-- Attachment #2: Type: text/html, Size: 2069 bytes --]
^ permalink raw reply [flat|nested] 10+ messages in thread* Re: what traffic is this? 2002-06-26 13:25 what traffic is this? JHoskins98 @ 2002-06-26 14:53 ` Tony Earnshaw 2002-06-26 15:13 ` Tony Earnshaw 2002-06-26 15:28 ` George Georgalis 2002-06-26 14:58 ` LuisMi 1 sibling, 2 replies; 10+ messages in thread From: Tony Earnshaw @ 2002-06-26 14:53 UTC (permalink / raw) To: JHoskins98; +Cc: netfilter [-- Attachment #1: Type: text/plain, Size: 724 bytes --] ons, 2002-06-26 kl. 15:25 skrev JHoskins98@aol.com: > The traffic is CDP - Cisco Discovery Protocol. It is a heartbeat to detect > changes i.e. newly attached or detacted cisco equipment. I've been having trouble with spamassassin recently, otherwise this posting would have been marked as spam, and discarded (everything in it's html). Exim chucks all viri from netfilter@lists.samba.org out, nevertheless. Tony -- Tony Earnshaw e-post: tonni@billy.demon.nl www: http://www.billy.demon.nl gpg public key: http://www.billy.demon.nl/tonni.armor Telefoon: (+31) (0)172 530428 Mobiel: (+31) (0)6 51153356 GPG Fingerprint = 3924 6BF8 A755 DE1A 4AD6 FA2B F7D7 6051 3BE7 B981 3BE7B981 [-- Attachment #2: Dette er en digitalt signert meldingsdel --] [-- Type: application/pgp-signature, Size: 189 bytes --] ^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: what traffic is this? 2002-06-26 14:53 ` Tony Earnshaw @ 2002-06-26 15:13 ` Tony Earnshaw 2002-06-26 15:28 ` George Georgalis 1 sibling, 0 replies; 10+ messages in thread From: Tony Earnshaw @ 2002-06-26 15:13 UTC (permalink / raw) To: netfilter [-- Attachment #1: Type: text/plain, Size: 720 bytes --] ons, 2002-06-26 kl. 16:53 skrev Tony Earnshaw: > Exim chucks all viri from netfilter@lists.samba.org out, nevertheless. Sorry, that should have been "chucks all viri from users@lists.freeswan.org". The former are so prevalent, that it makes that group the bête des bêtes of all mailing lists. Especial excuses to Harald W., whose anti-virus and anti-spam reasoning has otherwise proved faultless. Best, Tony -- Tony Earnshaw e-post: tonni@billy.demon.nl www: http://www.billy.demon.nl gpg public key: http://www.billy.demon.nl/tonni.armor Telefoon: (+31) (0)172 530428 Mobiel: (+31) (0)6 51153356 GPG Fingerprint = 3924 6BF8 A755 DE1A 4AD6 FA2B F7D7 6051 3BE7 B981 3BE7B981 [-- Attachment #2: Dette er en digitalt signert meldingsdel --] [-- Type: application/pgp-signature, Size: 189 bytes --] ^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: what traffic is this? 2002-06-26 14:53 ` Tony Earnshaw 2002-06-26 15:13 ` Tony Earnshaw @ 2002-06-26 15:28 ` George Georgalis 2002-06-26 15:56 ` Tony Earnshaw 1 sibling, 1 reply; 10+ messages in thread From: George Georgalis @ 2002-06-26 15:28 UTC (permalink / raw) To: Tony Earnshaw; +Cc: netfilter On Wed, Jun 26, 2002 at 04:53:20PM +0200, Tony Earnshaw wrote: >ons, 2002-06-26 kl. 15:25 skrev JHoskins98@aol.com: >> The traffic is CDP - Cisco Discovery Protocol. It is a heartbeat to detect >> changes i.e. newly attached or detacted cisco equipment. > >I've been having trouble with spamassassin recently, otherwise this >posting would have been marked as spam, and discarded (everything in >it's html). > not true. that email contained text/plain and text/html versions of the body. which is the prefered method to send mail if you want html available, I think there is an RFC supporting this. 1 <no description> [multipa/alternativ, 7bit, 3.3K] 2 <no description> [text/plain, 7bit, US-ASCII, 1.0K] 3 <no description> [text/html, 7bit, US-ASCII, 2.0K] If you are marking messages of this type as spam (because they include html), it may be a mistake. // George -- GEORGE GEORGALIS, System Admin/Architect cell: 347-451-8229 Security Services, Web, Mail, mailto:george@galis.org File, Print, DB and DNS Servers. http://www.galis.org/george ^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: what traffic is this? 2002-06-26 15:28 ` George Georgalis @ 2002-06-26 15:56 ` Tony Earnshaw 2002-06-26 16:07 ` Antony Stone ` (2 more replies) 0 siblings, 3 replies; 10+ messages in thread From: Tony Earnshaw @ 2002-06-26 15:56 UTC (permalink / raw) To: netfilter [-- Attachment #1: Type: text/plain, Size: 1278 bytes --] ons, 2002-06-26 kl. 17:28 skrev George Georgalis: ons, 2002-06-26 kl. 17:28 skrev George Georgalis: > not true. that email contained text/plain and text/html versions of > the body. which is the prefered method to send mail if you want html > available, I think there is an RFC supporting this. > > 1 <no description> [multipa/alternativ, 7bit, 3.3K] > 2 <no description> [text/plain, 7bit, US-ASCII, 1.0K] > 3 <no description> [text/html, 7bit, US-ASCII, 2.0K] > > If you are marking messages of this type as spam (because they include > html), it may be a mistake. Tried to send this privately, but your mailserver is obviously on the blink: George, I make up my own rules, and those are my rules. *No html in my Evolution mailbox*. I've been having trouble with Spamassassin, and that's my own fault. Others should know that .htm[l], nor viri, are *not* welcome in my mailbox. Best, -- Tony Earnshaw e-post: tonni@billy.demon.nl www: http://www.billy.demon.nl gpg public key: http://www.billy.demon.nl/tonni.armor Telefoon: (+31) (0)172 530428 Mobiel: (+31) (0)6 51153356 GPG Fingerprint = 3924 6BF8 A755 DE1A 4AD6 FA2B F7D7 6051 3BE7 B981 3BE7B981 [-- Attachment #2: Dette er en digitalt signert meldingsdel --] [-- Type: application/pgp-signature, Size: 189 bytes --] ^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: what traffic is this? 2002-06-26 15:56 ` Tony Earnshaw @ 2002-06-26 16:07 ` Antony Stone 2002-06-26 16:18 ` Patrick Schaaf 2002-06-26 16:33 ` George Georgalis 2 siblings, 0 replies; 10+ messages in thread From: Antony Stone @ 2002-06-26 16:07 UTC (permalink / raw) To: netfilter On Wednesday 26 June 2002 4:56 pm, Tony Earnshaw wrote: > I make up my own rules, and those are my rules. *No html in my Evolution > mailbox*. > > I've been having trouble with Spamassassin, and that's my own fault. > Others should know that .htm[l], nor viri, are *not* welcome in my > mailbox. Do you make a distinction between emails which *only* contain html, and those which contain html as well as a plain text version ? I generally find that the definitely undesirable ones fall into the former category, whilst those in the latter are typically just from Outlook users who haven't yet clicked on all the right buttons (although they may still have something useful to say to me). Just my 2c, Antony. ^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: what traffic is this? 2002-06-26 15:56 ` Tony Earnshaw 2002-06-26 16:07 ` Antony Stone @ 2002-06-26 16:18 ` Patrick Schaaf 2002-06-26 16:33 ` George Georgalis 2 siblings, 0 replies; 10+ messages in thread From: Patrick Schaaf @ 2002-06-26 16:18 UTC (permalink / raw) To: Tony Earnshaw; +Cc: netfilter > I make up my own rules, and those are my rules. *No html in my Evolution > mailbox*. [...] > Others should know that .htm[l], nor viri, are *not* welcome in my > mailbox. Tony, why would anybody on this list care about your mail filtering rules? Your public request is NOT welcome in MY mailbox. Stop it NOW. I don't give a damn about how you filter mail. If you want to tell somebody about your habit, do it my mailing them. The list is for discussion of netfilter, and not for discussion of your preferences of how to handle mail. I'm sending this mail to the list in the hope that it stops others from pursuing this fruitless off-topic thread. If you feel the need to reply to the above, please have the courtesy of mailing me directly, and sparing the list. regards Patrick ^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: what traffic is this? 2002-06-26 15:56 ` Tony Earnshaw 2002-06-26 16:07 ` Antony Stone 2002-06-26 16:18 ` Patrick Schaaf @ 2002-06-26 16:33 ` George Georgalis 2 siblings, 0 replies; 10+ messages in thread From: George Georgalis @ 2002-06-26 16:33 UTC (permalink / raw) To: Tony Earnshaw; +Cc: netfilter On Wed, Jun 26, 2002 at 05:56:49PM +0200, Tony Earnshaw wrote: >ons, 2002-06-26 kl. 17:28 skrev George Georgalis: > >ons, 2002-06-26 kl. 17:28 skrev George Georgalis: > >> not true. that email contained text/plain and text/html versions of >> the body. which is the prefered method to send mail if you want html >> available, I think there is an RFC supporting this. >> >> 1 <no description> [multipa/alternativ, 7bit, 3.3K] >> 2 <no description> [text/plain, 7bit, US-ASCII, 1.0K] >> 3 <no description> [text/html, 7bit, US-ASCII, 2.0K] >> >> If you are marking messages of this type as spam (because they include >> html), it may be a mistake. > >Tried to send this privately, but your mailserver is obviously on the >blink: > >George, > >I make up my own rules, and those are my rules. *No html in my Evolution >mailbox*. > >I've been having trouble with Spamassassin, and that's my own fault. >Others should know that .htm[l], nor viri, are *not* welcome in my >mailbox. > My mail server is working fine. It does look like the load has been a little high 8:55am up 2 days, 4:53, 0 users, load average: 8.70, 8.50, 4.99 9:00am up 2 days, 4:58, 0 users, load average: 0.45, 3.47, 3.78 Wed Jun 26 09:00:01 PDT 2002 9:05am up 2 days, 5:03, 0 users, load average: 1.39, 1.85, 2.96 9:10am up 2 days, 5:08, 0 users, load average: 16.33, 14.56, 8.57 9:15am up 2 days, 5:13, 0 users, load average: 1.07, 7.82, 7.49 9:20am up 2 days, 5:18, 0 users, load average: 0.87, 3.39, 5.63 9:25am up 2 days, 5:23, 0 users, load average: 1.12, 2.12, 4.46 I'm sure you can adjust Evolution to renter the text verses html? Or anyway you like. // George -- GEORGE GEORGALIS, System Admin/Architect cell: 347-451-8229 Security Services, Web, Mail, mailto:george@galis.org File, Print, DB and DNS Servers. http://www.galis.org/george ^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: what traffic is this? 2002-06-26 13:25 what traffic is this? JHoskins98 2002-06-26 14:53 ` Tony Earnshaw @ 2002-06-26 14:58 ` LuisMi 1 sibling, 0 replies; 10+ messages in thread From: LuisMi @ 2002-06-26 14:58 UTC (permalink / raw) To: JHoskins98; +Cc: netfilter -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Thanks for the info. :) - -- Luis Miguel Cruz. PGP KEY: 0x3AC52657 | [ADPSOFT] http://www.adpsoft.com | "Connecting your business" On Wed, 26 Jun 2002 JHoskins98@aol.com wrote: > The traffic is CDP - Cisco Discovery Protocol. It is a heartbeat to detect > changes i.e. newly attached or detacted cisco equipment. > > You can turn it off with "no cdp run" command at the enable prompt or "no cdp > enable" at the interface. > jhh > > In a message dated 6/26/2002 7:37:06 AM Eastern Standard Time, > netfilter-request@lists.samba.org writes: > > > > This traffic comes from a cisco router. > > what type of traffic is ? > > > > [root@cuelebre root]# tcpdump -i eth2 > > tcpdump: listening on eth2 > > > > 13:19:12.640000 0:4:dd:c:42:a6 0:4:dd:c:42:a6 loopback 60: > > 0000 0100 0000 0000 0000 0000 0000 0000 > > 0000 0000 0000 0000 0000 0000 0000 0000 > > 0000 0000 0000 0000 0000 0000 0000 > > 13:19:22.640000 0:4:dd:c:42:a6 0:4:dd:c:42:a6 loopback 60: > > 0000 0100 0000 0000 0000 0000 0000 0000 > > 0000 0000 0000 0000 0000 0000 0000 0000 > > 0000 0000 0000 0000 0000 0000 0000 > > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iEYEARECAAYFAj0Z1pEACgkQvQHLTzrFJle/hgCgjnU7W3LIc2i+l+RJ77VS0qDC dNcAoJrZuGnYCdnMYGQK8+yY4NJWKgLu =3K1e -----END PGP SIGNATURE----- ^ permalink raw reply [flat|nested] 10+ messages in thread
* what traffic is this?
@ 2002-06-26 11:23 LuisMi
0 siblings, 0 replies; 10+ messages in thread
From: LuisMi @ 2002-06-26 11:23 UTC (permalink / raw)
To: netfilter
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
This traffic comes from a cisco router.
what type of traffic is ?
[root@cuelebre root]# tcpdump -i eth2
tcpdump: listening on eth2
13:19:12.640000 0:4:dd:c:42:a6 0:4:dd:c:42:a6 loopback 60:
0000 0100 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000
13:19:22.640000 0:4:dd:c:42:a6 0:4:dd:c:42:a6 loopback 60:
0000 0100 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000
13:19:32.640000 0:4:dd:c:42:a6 0:4:dd:c:42:a6 loopback 60:
0000 0100 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000
13:19:42.640000 0:4:dd:c:42:a6 0:4:dd:c:42:a6 loopback 60:
0000 0100 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000
13:19:52.640000 0:4:dd:c:42:a6 0:4:dd:c:42:a6 loopback 60:
0000 0100 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000
13:20:02.660000 0:4:dd:c:42:a6 0:4:dd:c:42:a6 loopback 60:
0000 0100 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000
6 packets received by filter
0 packets dropped by kernel
- --
Luis Miguel Cruz.
PGP KEY: 0x3AC52657 | [ADPSOFT] http://www.adpsoft.com
| "Connecting your business"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iEYEARECAAYFAj0ZpCoACgkQvQHLTzrFJleWvQCfXENyDw/upk4JZcfUdx6SbQPT
V7YAn2Gy1o9vhmTJXq7Livz++cAgJ7DM
=anWn
-----END PGP SIGNATURE-----
^ permalink raw reply [flat|nested] 10+ messages in threadend of thread, other threads:[~2002-06-26 16:33 UTC | newest] Thread overview: 10+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2002-06-26 13:25 what traffic is this? JHoskins98 2002-06-26 14:53 ` Tony Earnshaw 2002-06-26 15:13 ` Tony Earnshaw 2002-06-26 15:28 ` George Georgalis 2002-06-26 15:56 ` Tony Earnshaw 2002-06-26 16:07 ` Antony Stone 2002-06-26 16:18 ` Patrick Schaaf 2002-06-26 16:33 ` George Georgalis 2002-06-26 14:58 ` LuisMi -- strict thread matches above, loose matches on Subject: below -- 2002-06-26 11:23 LuisMi
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.