On Mon, 26 Sep 2005, conor at discuskeeping.com wrote:
> Getting these logs in messages, are they broadcasts or what?
Yes, of course.
> kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:04:75:82:3d:34:08:00 SRC=0.0.0.0
> DST=255.255.255.255 LEN=328 TOS=0x00 PREC=0x00 TTL=128 ID=3407 PROTO=UDP SPT=68
> DPT=67 LEN=308
>> SPT=68 which should be bootpc?
> DPT=67 whish is also bootpcs.
It's either BOOTP or DHCP - they both use same port. You'd need to
sniff the packets to tell difference (or just run dhcpd, it'll parse
the packets for you :) ).
> They are filling up the logs (custoemrs, not mine) and he has system
>From a few little BOOTP/DHCP packets? Highly unlikely, unless there's
a few machines doing nothing but spewing out such packets (in which
case, everything else on that network would be suffering too). And
define 'system instability'?
> Just got the case but pointers would be nice today. I do not see
> anything else relevant in the messages file I have.
> Work that body.
Uhmm, no thanks :)
Paul Jakma paul at clubi.iepaul at jakma.org Key ID: 64A2FF6A
Anybody with money to burn will easily find someone to tend the fire.
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!