Anyone in here know what kind of packets these are?
I''m starting to suspect a dud switch or some kind of
creative cabling... (I''m not physically at the site so I
can''t check it...)
(from tcpdump)
18:15:59.949565 0:0:0:0:0:50 1:80:c2:0:0:1 8808 60:
0001 0000 0000 8808 0001 0000 0000 8808
0001 0000 0000 8808 0001 0000 0000 8808
0001 0000 0000 8808 0001 0000 0000
18:15:59.991512 0:0:0:0:0:50 1:80:c2:0:0:1 8808 60:
0001 0000 0000 8808 0001 0000 0000 8808
0001 0000 0000 8808 0001 0000 0000 8808
0001 0000 0000 8808 0001 0000 0000
18:16:00.033462 0:0:0:0:0:50 1:80:c2:0:0:1 8808 60:
0001 0000 0000 8808 0001 0000 0000 8808
0001 0000 0000 8808 0001 0000 0000 8808
0001 0000 0000 8808 0001 0000 0000
18:16:00.075414 0:0:0:0:0:50 1:80:c2:0:0:1 8808 60:
...
...
/magnus
Something similar to that has happened to me as well, and I have no idea
what that is.
---
Aaron Axelsen
AIM: AAAK2
Email: axelseaa@amadmax.com
URL: www.amadmax.com
"It said, ""Insert disk #3,"" but only two will
fit!"
"One picture is worth 128K words."
-----Original Message-----
From: shorewall-users-admin@shorewall.net
[mailto:shorewall-users-admin@shorewall.net] On Behalf Of Magnus Stenman
Sent: Thursday, April 25, 2002 11:05 AM
To: shorewall-users
Subject: [Shorewall-users] weird packets
Anyone in here know what kind of packets these are?
I''m starting to suspect a dud switch or some kind of
creative cabling... (I''m not physically at the site so I
can''t check it...)
(from tcpdump)
18:15:59.949565 0:0:0:0:0:50 1:80:c2:0:0:1 8808 60:
0001 0000 0000 8808 0001 0000 0000 8808
0001 0000 0000 8808 0001 0000 0000 8808
0001 0000 0000 8808 0001 0000 0000
18:15:59.991512 0:0:0:0:0:50 1:80:c2:0:0:1 8808 60:
0001 0000 0000 8808 0001 0000 0000 8808
0001 0000 0000 8808 0001 0000 0000 8808
0001 0000 0000 8808 0001 0000 0000
18:16:00.033462 0:0:0:0:0:50 1:80:c2:0:0:1 8808 60:
0001 0000 0000 8808 0001 0000 0000 8808
0001 0000 0000 8808 0001 0000 0000 8808
0001 0000 0000 8808 0001 0000 0000
18:16:00.075414 0:0:0:0:0:50 1:80:c2:0:0:1 8808 60: ... ...
/magnus
_______________________________________________
Shorewall-users mailing list
Shorewall-users@shorewall.net
http://www.shorewall.net/mailman/listinfo/shorewall-users
I''ve been known to be the "network idiot", but these look to me to be ARP requests in IPv6 format. I guess I''ll be pulling out those "sniffing" papers again..... Wayne> From: "Aaron Axelsen" <axelseaa@amadmax.com> > To: "''Magnus Stenman''" <stone@hkust.se>, > "''shorewall-users''" <shorewall-users@shorewall.net> > Subject: RE: [Shorewall-users] weird packets > Date: Thu, 25 Apr 2002 11:07:41 -0500 > > Something similar to that has happened to me as well, and I have no idea > what that is. > > --- > Aaron Axelsen > AIM: AAAK2 > Email: axelseaa@amadmax.com > URL: www.amadmax.com > > "It said, ""Insert disk #3,"" but only two will fit!" > "One picture is worth 128K words." > > > -----Original Message----- > From: shorewall-users-admin@shorewall.net > [mailto:shorewall-users-admin@shorewall.net] On Behalf Of Magnus Stenman > Sent: Thursday, April 25, 2002 11:05 AM > To: shorewall-users > Subject: [Shorewall-users] weird packets > > > Anyone in here know what kind of packets these are? > > I''m starting to suspect a dud switch or some kind of > creative cabling... (I''m not physically at the site so I > can''t check it...) > > > > (from tcpdump) > 18:15:59.949565 0:0:0:0:0:50 1:80:c2:0:0:1 8808 60: > 0001 0000 0000 8808 0001 0000 0000 8808 > 0001 0000 0000 8808 0001 0000 0000 8808 > 0001 0000 0000 8808 0001 0000 0000 > 18:15:59.991512 0:0:0:0:0:50 1:80:c2:0:0:1 8808 60: > 0001 0000 0000 8808 0001 0000 0000 8808 > 0001 0000 0000 8808 0001 0000 0000 8808 > 0001 0000 0000 8808 0001 0000 0000 > 18:16:00.033462 0:0:0:0:0:50 1:80:c2:0:0:1 8808 60: > 0001 0000 0000 8808 0001 0000 0000 8808 > 0001 0000 0000 8808 0001 0000 0000 8808 > 0001 0000 0000 8808 0001 0000 0000 > 18:16:00.075414 0:0:0:0:0:50 1:80:c2:0:0:1 8808 60: ... ... > > /magnus > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@shorewall.net > http://www.shorewall.net/mailman/listinfo/shorewall-users() Join the ASCII ribbon campaign against HTML email and Microsoft specific attachments. /\ If I wanted to read HTML, I would have visited your website! Support open standards.
On Thursday, 25. April 2002 18:04, you wrote: Hi,> Anyone in here know what kind of packets these are?> 18:15:59.949565 0:0:0:0:0:50 1:80:c2:0:0:1 8808 60: > 0001 0000 0000 8808 0001 0000 0000 8808 > 0001 0000 0000 8808 0001 0000 0000 8808 > 0001 0000 0000 8808 0001 0000 0000I dont have the authoritative answer :) but , i have seen something like that bevore. The first time it was an cisco router and it could never realy made clear what it was trying to do. The second time it was an older HUB (D-LINK) which used some non-RFC form of spanning tree protocol. regards Jörg -- Joerg Hartmann mediadesign akademie Phone: +49 340 253 20 23 j.hartmann@des.mediadesign.de Fax: +49 340 253 20 10