[an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive]
 
[an error occurred while processing this directive] [an error occurred while processing this directive]
Skåne Sjælland Linux User Group - http://www.sslug.dk Home   Subscribe   Mail Archive   Forum   Calendar   Search
MhonArc Date: [Date Prev] [Date Index] [Date Next]   Thread: [Date Prev] [Thread Index] [Date Next]   MhonArc
 

Re: [TEKNIK] Output fra tcpdump



In <sslug@sslug> sslug@sslug writes:

>On 19 Apr 2000, Henrik Storner wrote:

>> In <sslug@sslug>
>> sslug@sslug writes:
>> 
>> >20:03:16.645964 P 8:0:39:4:12:61 0:0:0:0:0:1 809f 60: 
>> 
>> >8:0:39:4:12:61 er MAC-adresen på routeren.
>> 
>> >Hvad er det, og hvad gør det godt for?

Jeg tror nu at jeg har fundet ud af hvordan denne linie skal fortolkes.
Det er din router, der laver trafikken - source-adressen står først,
og det er efter hvad du skriver routerens adresse. Destination adressen
er så 0:0:0:0:0:1 - den er lidt mærkelig, det må være en eller anden
slags broadcast adresse.

809f er Ethernet frametype feltet. De typer som Linux kender står i
include/linux/if_ether.h (i kerne sourcen), men 809f er ikke en af
dem. Jeg synes bare det tal virker bekendt, fra en gang jeg sad og
debuggede nogen problemer med Token-Ring og IPX. Derfor min bemærkning
om du evt. havde IPX loaded i Linux maskinen.

60: er formentlig blot længden af pakken.

Prøv at checke router opsætningen, om det evt. kan være noget
keep-alive trafik, IPX SAP broadcasts eller andet pjat.
-- 
Henrik Storner     | "Crackers thrive on code secrecy. Cockcroaches breed 
<sslug@sslug> |  in the dark. It's time to let the sunlight in."
                   |  
                   |          Eric S. Raymond, re. the Frontpage backdoor


 
Home   Subscribe   Mail Archive   Index   Calendar   Search

 
 
Questions about the web-pages to <www_admin>. Last modified 2005-08-10, 21:38 CEST [an error occurred while processing this directive]
This page is maintained by [an error occurred while processing this directive]MHonArc [an error occurred while processing this directive] # [an error occurred while processing this directive] *