Strange network traffic??
V.M.Smith
vmsmith at grokking.org
Fri Apr 18 04:23:11 PDT 2003
AFAIK OSPF (Open Shortest Path First) is a protocol used by routers for
determining optimal pathways through the network. The frequency suggests
router advertisements: "I'm here and I route traffic to network
xxx.xxx.xxx.xxx/xx". I think OSPF uses multicast (and older RIP uses
ICMP??) Capturing and analyzing the packet headers would probably clear
up the mystery rather quickly.
I leave it to more knowledgeable list members to explain more and/or
correct my ignorance :)
Cheers,
VS
On Thu, 2003-04-17 at 22:27, Dragoncrest wrote:
> Hi all. Just a few weeks back I started noticing this traffic showing up
> on my lan and I have no idea how to explain it. Using trafshow I get the
> from address as my router gateway for our connection coming in from our
> provider, and destination as OSPF-ALL.MCAST.NET, the protocol is OSPF, and
> it's only sending about 80 bytes of data every 30 seconds to a minute or
> so. It's obviously not internal network traffic as source and destination
> are not internal, yet these show up on my machine when I'm monitoring the
> network. Any suggestions, ideas, or thoughts as to what the heck this is??
>
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
More information about the freebsd-questions
mailing list