Re: udp or tcp?

[Jeremy Gaddis <jlgaddis@blueriver.net>]

On Sun, Sep 24, 2000 at 03:30:28PM +0200, Sven Burgener wrote:

> Is the following a tcp or a udp packet?  How do I tell?
 
> Sep 24 15:20:25 host kernel: Packet log: input DENY eth0 \
> 	PROTO=17 10.209.80.109:68 255.255.255.255:67 \
> 	L=576 S=0x00 I=9145 F=0x4000 T=32 (#11)

The key here is the "PROTO=" part:

[jeremy@server:pts/2:~]$ grep udp /etc/protocols
udp     17      UDP             # user datagram protocol

[jeremy@server:pts/2:~]$ grep tcp /etc/protocols
tcp     6       TCP             # transmission control protocol

> This seems to be a broadcast by the DHCP server of my cable provider,
> right?

67 == BOOTP server, 68 == BOOTP client.

It appears to be a machine (10.209.80.109) broadcasting a
request for an IP address (DHCP).

-jg

-- 
Jeremy L. Gaddis     <jlgaddis@blueriver.net>