Sid Boyce wrote:
Richard Atcheson wrote:
On SuSE 9.0 running the IP Traffic I see this message quite frequently: UDP (350 bytes) from 10.54.64.1 bootps to 255.255.255.255:bootpc on eth0. What is going on? Tnx, Richard ...snip! Ok I think I understand its purpose but I have no idea why it is appearing on my eth0 which is my connection to the cable modem. Is
On Wednesday 31 December 2003 11:29 pm, Sid Boyce wrote: this an attempt to break into my machine?? My subnet is 192.168.1.0/24 I have no idea where the 10.0.0. stuf is coming from . Richard Whilst I was in the States and trying to connect using my brother's cable modem, I could see lots of network traffic using ethereal - none of it was local, it looked like the cable modem was passing on whatever it saw on the external connection. I don't see that at home, possibly because I'm behind a firewall (using an old Cyrix M200/16M with BBIagent floppy). It's possible someone could be sending those requests to see if
Richard Atcheson wrote: they can get an answer and a connection to vulnerable machines, that would be a neat way of being a trojan host on a network. Regards Sid.
As someone described in another thread, cable is like a party line so the data stream includes stuff that isn't for you. Perhaps you are just seeing activity that belongs to adownstream or upstream user? Just guessing ... doc -- "Wars and rumors of wars, disasters, and social decay, yet undaunted for love and peace we pray." dmc ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~