[ previous ] [ next ] [ threads ]
 
 From:  <Kamil dot Wencel at hvbpensionsfonds dot de>
 To:  <sonicsai at gmail dot com>, <m0n0wall at lists dot m0n0 dot ch>
 Subject:  AW: [m0n0wall] tracking down ip
 Date:  Thu, 26 Jan 2006 14:41:43 +0100
Hi sai,

this IP looks like Microsofts default IP if your Windows Client
is not able to get an IP via DHCP. I have no idea why MS picked
that IP, but it looks strangely familiar.

Kamil


Von: sai [mailto:sonicsai at gmail dot com]
Gesendet: Donnerstag, 26. Januar 2006 14:25
An: m0n0wall at lists dot m0n0 dot ch
Betreff: [m0n0wall] tracking down ip


I have
10:16:00.273735 rl0 @0:10 b 169.254.15.77,138 -> 169.254.255.255,138
PR udp len 20 236 IN

showing up on the logs.

Now rl0 is my LAN and the ip addresses are 192.168.10.1/24 so this
shouldn't be coming from the LAN.
There is nothing with 169..x.x.x in the arp tables. Is this packet
from the LAN or what? If it is on my LAN then how do I track down
which computer is doing this using m0n0?

sai

---------------------------------------------------------------------
To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch