Re: understand the logs

[Ron Johnson <ron.l.johnson@cox.net>]

On 10/11/08 18:24, Abel McClendon wrote:
> 	 On Sat, 11 Oct 2008 19:09:23 -0400
> 		 Daryl Styrk <darylstyrk@gmail.com> wrote:
>
> > Oct 11 14:08:45 debian kernel: [44140.916755] Inbound IN=wlan0 OUT=
> > MAC=ff:ff:ff:ff:ff:ff:00:17:f2:eb:42:2e:08:00 SRC=10.0.1.5
> > DST=10.0.1.255 LEN=113 TOS=0x00 PREC=0x00 TTL=64 ID=62369 PROTO=UDP
> > SPT=631 DPT=631 LEN=93
>
>
> dept is the port, 631 is IPP...
> # cat /etc/services | grep -i 631
> ipp		631/tcp				# Internet Printing Protocol
> ipp		631/udp
>
> Inbound packets are coming in on wlan0 I presume a wireless connection
> on this pc. 
>
> The src of those packets is ip address 10.0.1.5 another machine on your local
> network(most likely) although if the wireless router you are connecting to
> uses that range of ip's .... 
>
> I am sure some may have a better more detailed explanation, albeit real
> similar.

Correct.  OP has a CUPS printer attached to 10.0.1.5, and it's 
broadcasting (Note that the destination is 0.0.1.255, the broadcast 
address) "here I am, love me, print on me!" messages.

--
Ron Johnson, Jr.
Jefferson LA  USA

"Do not bite at the bait of pleasure till you know there is no
hook beneath it."  -- Thomas Jefferson