Re: Where is the packet coming from
Ross Jordan <[email protected]>
| Newsgroups | gmane.user-groups.linux.ottawa.general |
|---|---|
| Message-ID | <[email protected]> |
netstat -p option will show you the process that owns a particular socket. -Ross It would seem Mike, on Sun, Jan 24, 2010 at 04:20:33PM -0500, wrote: > I am trying to locate the source of some ICMP packets being sent to the > gateway > > tcpdump shows this info > > xxxx.local > 192.168.1.1: ICMP echo request, id 56179, seq 5, length 64 > 16:02:41.235291 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP > (1), length 84) > xxxx.local > 192.168.1.1: ICMP echo request, id 56179, seq 6, length 64 > 16:02:42.243203 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP > (1), length 84) > xxxx.local > 192.168.1.1: ICMP echo request, id 56179, seq 7, length 64 > 16:02:43.251204 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP > (1), length 84) > xxxx.local > 192.168.1.1: ICMP echo request, id 56179, seq 8, length 64 > 16:02:44.259204 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP > (1), length 84) > xxxx.local > 192.168.1.1: ICMP echo request, id 56179, seq 9, length 64 > 16:02:45.267203 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP > (1), length 84) > xxxx.local > 192.168.1.1: ICMP echo request, id 56179, seq 10, length 64 > 16:02:45.677290 IP (tos 0xc0, ttl 64, id 42659, offset 0, flags [none], proto > ICMP (1), length 90) > > They seem to come in bunches of 10 > There are no other users logged in to the machine but me via ssh > > it is an Ubuntu machine > 2.6.31-14-generic #48-Ubuntu SMP Fri Oct 16 14:04:26 UTC 2009 i686 GNU/Linux > > How can I determine which process is responsible? > > -- > Collector of vintage computers http://www.ncf.ca/~ba600 > -- > OCLUG general discussion list > [email protected] > http://oclug.on.ca/mailman/listinfo/oclug -- OCLUG general discussion list [email protected] http://oclug.on.ca/mailman/listinfo/oclug