Re: [users] MAC -> IP?
>>>>> "S" == S Breedveld <S.Breedveld@ITS.TUDelft.NL> writes:
S> well, I just installed a firewall with iptable logging, and I get
S> about every second an entry like this in syslog:
S> aluqah kernel: UDP Dropped: IN=eth0 OUT=
S> MAC=ff:ff:ff:ff:ff:ff:00:c0:f0:19:b0:8e:08:00 SRC=192.168.0.2
S> DST=255.255.255.255 LEN=176 TOS=0x00 PREC=0x00 TTL=128 ID=1280
S> PROTO=UDP SPT=1015 DPT=1015 LEN=156
Someone is sending broadcast packages on the eth0 interface. I assume
this is the external (Internet) side of your firewall.
The broadcasts are sent toUDP port 1015. I don't have this port in
/etc/services. I wanted to look it up on http://www.iana.org/ but my
connection is very bad at the moment.
--
G. ``Iggy'' Geens - ICQ: #64109250
Home: <ggeens@iname.com> - Work: <ggeens@capgemini.be>
WWW: http://users.pandora.be/guy.geens/
``I was thinking about how everyone was dying
and maybe it's time to live.'' - Eels
Reply to: