Where is the packet coming from
Mike <[email protected]>
| Newsgroups | gmane.user-groups.linux.ottawa.general |
|---|---|
| Message-ID | <[email protected]> |
I am trying to locate the source of some ICMP packets being sent to the
gateway
tcpdump shows this info
xxxx.local > 192.168.1.1: ICMP echo request, id 56179, seq 5, length 64
16:02:41.235291 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP
(1), length 84)
xxxx.local > 192.168.1.1: ICMP echo request, id 56179, seq 6, length 64
16:02:42.243203 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP
(1), length 84)
xxxx.local > 192.168.1.1: ICMP echo request, id 56179, seq 7, length 64
16:02:43.251204 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP
(1), length 84)
xxxx.local > 192.168.1.1: ICMP echo request, id 56179, seq 8, length 64
16:02:44.259204 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP
(1), length 84)
xxxx.local > 192.168.1.1: ICMP echo request, id 56179, seq 9, length 64
16:02:45.267203 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP
(1), length 84)
xxxx.local > 192.168.1.1: ICMP echo request, id 56179, seq 10, length 64
16:02:45.677290 IP (tos 0xc0, ttl 64, id 42659, offset 0, flags [none], proto
ICMP (1), length 90)
They seem to come in bunches of 10
There are no other users logged in to the machine but me via ssh
it is an Ubuntu machine
2.6.31-14-generic #48-Ubuntu SMP Fri Oct 16 14:04:26 UTC 2009 i686 GNU/Linux
How can I determine which process is responsible?
--
Collector of vintage computers http://www.ncf.ca/~ba600
--
OCLUG general discussion list
[email protected]
http://oclug.on.ca/mailman/listinfo/oclug