small patch for ngctl
Ganbold
ganbold at micom.mng.net
Sun May 21 21:15:21 PDT 2006
Brian Candler wrote:
> On Fri, May 19, 2006 at 05:25:16PM +0900, Ganbold wrote:
>
>> Rec'd data packet on hook "qqqq":
>> 0000: ff ff ff ff ff ff 00 14 6c 2e 23 71 08 00 45 00 ........l.#q..E.
>> 0010: 00 4e 17 4e 00 00 80 11 a0 c6 c0 a8 00 3b c0 a8 .N.N.........;..
>> 0020: 00 ff 00 89 00 89 00 3a b1 dc 80 8f 01 10 00 01 .......:........
>> 0030: 00 00 00 00 00 00 20 45 4f 45 42 46 44 45 42 45 ...... EOEBFDEBE
>> 0040: 42 43 41 43 41 43 41 43 41 43 41 43 41 43 41 43 BCACACACACACACAC
>> ...
>>
>> Is it what it supposed to handle?
>>
>
> Looks like a valid ethernet frame to me;
>
> ff:ff:ff:ff:ff:ff - destination MAC addr (broadcast)
> 00:14:6c:2e:23:71 - source MAC addr
> 0800 - protocol (IP)
> 45 00 - IPv4
> 00 4e - datagram length
> 17 4e 00 00 - ID, flags, frag offset
> 80 - TTL
> 11 - protocol (UDP)
> a0 c6 - header checksum
> c0 a8 00 3b - source IP: 192.168.0.59
> c0 a8 00 ff - destination IP: 192.168.0.255
> 00 89 - source port 137
> 00 89 - destination port 137
> 00 3a - length
> b1 dc - UDP checksum
> ... - ... data
>
> So I'd say this is some Windows machine broadcasting NetBIOS crap around
> your network :-)
>
Yeah, I'm all alone with FreeBSD, everybody in office uses Windows
except me :(
Ganbold
> Regards,
>
> Brian.
> _______________________________________________
> freebsd-current at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to "freebsd-current-unsubscribe at freebsd.org"
>
>
>
>
More information about the freebsd-current
mailing list