On 12/03/2014 11:13 AM, Mark Milhollan wrote: <>> Do you mean PartedMagic as the destination port? If so that's just a > translation from the port number to a name found in your /etc/services > file. It is often wrong or misleading, and in most cases can be > ignored.i have no PartedMagic in /etc/services>> NetName: COMCAST-VOIP-4 > > Given this it seems like you have Comcast phone service and what > you are seeing is your phone checking-in with their switch.my isp service is DSL with bellsouth.net over copper. my neighbors to north and south of my home use comcast and they have wifi between them. wireless on my router is not enabled. wireshark text file loaded at; http://pastebin.com/rCU0CC10 -- peace out. in a world with out fences, who needs gates. tc,hago. g .
On 12/3/2014 12:47 PM, g wrote:> wireshark text file loaded at; > > http://pastebin.com/rCU0CC10some device on your network has the MAC address 00:0f:fe:8f:8f:23 which Wireshark is calling PartedMagic for unknown reasons. That MAC prefix apparently belongs to an obscure Chinese computer maker, G-Pro Computers. http://macaddress.webwat.ch/vendor/G-PRO_COMPUTER the weblink given for G-Pro is wrong. some random google searching suggests that they may be an OEM for Lite-On, do you have any network devices from Lite-On (I'm only familiar with Lite-On as a CD/DVD burner/reader brand). oh. the ARP packet suggests that MAC address is 192.168.1.144 1. No. Time Source Destination Protocol Length Info 2. 3 1.137831000 PartedMagic Broadcast ARP 42 Who has 192.168.1.254? Tell 192.168.1.144 3. 4. Frame 3: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) on interface 0 5. Ethernet II, Src: PartedMagic (00:0f:fe:8f:8f:23), Dst: Broadcast (ff:ff:ff:ff:ff:ff) 6. Address Resolution Protocol (request) -- john r pierce 37N 122W somewhere on the middle of the left coast
John, thank you for replying. On 12/03/2014 03:21 PM, John R Pierce wrote:> On 12/3/2014 12:47 PM, g wrote: >> wireshark text file loaded at; >> >> http://pastebin.com/rCU0CC10 > > some device on your network has the MAC address 00:0f:fe:8f:8f:23 > which Wireshark is calling PartedMagic for unknown reasons.see my new paste at; http://pastebin.com/8vBxnUSf> That MAC prefix apparently belongs to an obscure Chinese computer > maker, G-Pro Computers. http://macaddress.webwat.ch/vendor/G-PRO_COMPUTER > the weblink given for G-Pro is wrong.interesting. where does one look to find assignment for MAC addresses?> some random google searching suggests that they may be an OEM for > Lite-On, do you have any network devices from Lite-Onno network devices from Lite-on. ~]$ lspci|grep net 00:19.0 Ethernet controller: Intel Corporation 82566DM-2 Gigabit Network Connection (rev 02) ~]$> (I'm only familiar with Lite-On as a CD/DVD burner/reader brand).same here.> oh. the ARP packet suggests that MAC address is 192.168.1.144that is how i see it. -- peace out. in a world with out fences, who needs gates. tc,hago. g .