Linux Netfilter discussions
 help / color / mirror / Atom feed
* unknown data
@ 2004-05-16 11:01 azeem ahmad
  2004-05-16 13:59 ` Antony Stone
  0 siblings, 1 reply; 2+ messages in thread
From: azeem ahmad @ 2004-05-16 11:01 UTC (permalink / raw)
  To: netfilter

hi all
a machine (192.168.0.106) from my LAN is continously sending this data to 
server (192.168.0.100) as shown below in the output of tcpdump. althought 
the data isnt too much but i m wondering what this data is for
---------------------------------------------------------------------------------------------------------------------------------
15:38:36.412035 aro who-has 192.168.0.106 tell 192.168.0.100
15:38:36.412269 arp reply 192.168.0.106 is-at 0:8:c7:99:b6:75
15:49:26.543540 192.168.0.106.35847 > 192.168.0.100.1900 udp 132 [ttl 1]
15:49:26.543600 192.168.0.100 > 192.168.0.106: icmp: 192.168.0.100 udp port 
1900 unreachable [tos 0xc0]
15:49:26.543647 192.168.0.106.35847 > 192.168.0.100.1900 udp 133 [ttl 1]
15:49:26.543671 192.168.0.100 > 192.168.0.106: icmp: 192.168.0.100 udp port 
1900 unreachable [tos 0xc0]
---------------------------------------------------------------------------------------------------------------------------------

Regards
Azeem

_________________________________________________________________
Is your PC infected? Get a FREE online computer virus scan from McAfee® 
Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963



^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: unknown data
  2004-05-16 11:01 unknown data azeem ahmad
@ 2004-05-16 13:59 ` Antony Stone
  0 siblings, 0 replies; 2+ messages in thread
From: Antony Stone @ 2004-05-16 13:59 UTC (permalink / raw)
  To: netfilter

On Sunday 16 May 2004 12:01 pm, azeem ahmad wrote:

> hi all
> a machine (192.168.0.106) from my LAN is continously sending this data to
> server (192.168.0.100) as shown below in the output of tcpdump. althought
> the data isnt too much but i m wondering what this data is for
> ---------------------------------------------------------------------------
> 15:38:36.412035 arp who-has 192.168.0.106 tell 192.168.0.100
> 15:38:36.412269 arp reply 192.168.0.106 is-at 0:8:c7:99:b6:75
> 15:49:26.543540 192.168.0.106.35847 > 192.168.0.100.1900 udp 132 [ttl 1]

USP port 1900 is M$ PnP service.   I suggest you disable this on machine 
192.168.0.106

Regards,

Antony.

-- 
Perfection in design is achieved not when there is nothing left to add, but 
rather when there is nothing left to take away.

 - Antoine de Saint-Exupery

                                                     Please reply to the list;
                                                           please don't CC me.



^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2004-05-16 13:59 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-05-16 11:01 unknown data azeem ahmad
2004-05-16 13:59 ` Antony Stone

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox