[ale] tcpdump questions

Scott Nolde smnolde-linux at mindspring.com
Sat Aug 14 14:26:55 EDT 1999


I've been looking at tcpdump results... 

14:20:43.168952 tnt4.harrisburg.pa.da.uu.net > win985: icmp: host
63.0.61.11 unreachable
14:20:44.869146 win985.1101 > 63.0.61.11.1516: S 1003621:1003621(0) win
8192 <mss 1460> (DF)
14:20:45.038987 tnt4.harrisburg.pa.da.uu.net > win985: icmp: host
63.0.61.11 unreachable
14:20:50.878209 win985.1101 > 63.0.61.11.1516: S 1003621:1003621(0) win
8192 <mss 1460> (DF)
14:20:51.038937 tnt4.harrisburg.pa.da.uu.net > win985: icmp: host
63.0.61.11 unreachable
14:21:02.896291 win985.1101 > 63.0.61.11.1516: S 1003621:1003621(0) win
8192 <mss 1460> (DF)
14:21:03.978966 tnt4.harrisburg.pa.da.uu.net > win985: icmp: host
63.0.61.11 unreachable
14:21:28.939901 win985.1102 > 63.0.61.11.1516: S 1050689:1050689(0) win
8192 <mss 1460> (DF)
14:21:29.108955 tnt4.harrisburg.pa.da.uu.net > win985: icmp: host
63.0.61.11 unreachable
14:21:31.940061 win985.1102 > 63.0.61.11.1516: S 1050689:1050689(0) win
8192 <mss 1460> (DF)
14:21:32.808956 tnt4.harrisburg.pa.da.uu.net > win985: icmp: host
63.0.61.11 unreachable
14:21:34.108889 arp who-has win985 tell smnolde.com

win985 is a NT box connected to my subnetted rh6 linux box on 10.0.0.0.
63.0.61.11 is not connected to my network at all, but is a site I
remotely log into occasionally.  There is no program running on the NT
box asking for 63.0.61.11.

What service could possibly be asking for 63.0.61.11?  and why?


------------------------------------------------
                 Scott Nolde
         smnolde-linux at mindspring.com
                NT just sucks
------------------------------------------------






More information about the Ale mailing list