Re: Mysterious broadcast
On Thu, Jan 09, 2003 at 12:15:16PM -0600, Dennis Wicks wrote:
> tcpdump -i eth0 -c 10
> device eth0 entered promiscuous mode
> tcpdump: listening on eth0
> 11:55:15.118933 ipsrvcs3.cdg.ws.netbios-dgm > 10.80.20.255.netbios-dgm:
> >>> NBT UDP PACKET(138) Res=0x110E ID=0xD923 IP=10 (0xa).80 (0x50).20
> (0x14).63 (0x3f) Port=138 (0x8a) Length=199 (0xc7)
> SourceName=IPSRVCS3 NameType=0x20 (Server)
> DestName=
> [...]
> |domain] 11:55:15.129341 arsenic.cdg.ws.1057 >
> ipsrvcs1.cdg.ws.domain: 27212+ PTR? 61.20.80.10.in-addr.arpa. (42) (DF)
These are NetBIOS datagrams, probably from samba (unless you have a Windows
machine on the same broadcast segment ;-) ).
--
- mdz
Reply to: