[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freebsd-net
Subject:    Re: Strange Network Traffic
From:       David Schooley <dcschooley () ieee ! org>
Date:       2000-05-29 7:38:54
[Download RAW message or body]

At 1:23 AM -0400 5/29/00, Omachonu Ogali wrote:
>
>  >
>>  May 25 23:30:00 bicycle /kernel: ipfw: 1000 Deny UDP 192.168.1.1:1030
>>  255.255.255.255:162 in via fxp1
>>  May 25 23:30:00 bicycle /kernel: ipfw: 1000 Deny UDP 192.168.1.1:1030
>>  255.255.255.255:162 in via fxp0
>>
>>  and later, it happens again:
>>
>>  May 28 16:52:04 bicycle /kernel: ipfw: 1000 Deny UDP 192.168.1.1:1031
>>  255.255.255.255:162 in via fxp1
>>  May 28 16:52:04 bicycle /kernel: ipfw: 1000 Deny UDP 192.168.1.1:1031
>>  255.255.255.255:162 in via fxp0
>>
>>  The Linksys shouldn't be doing anything with SNMP, so are evil
>>  crackers trying to do something?
>>
>>
>
>The router is broadcasting SNMP traps (port 162) to the LAN.
>

I know that's what I am getting, but the documentation for the router 
doesn't say anything about support for SNMP, nor does the router 
respond when SNMP packets go the other way, so I got suspicious. I 
have been playing around with it, and cycling power to the router 
causes those packets to be sent out, so I guess the router really is 
doing it.

-- 
---------------------------------------------------
   David C. Schooley, Ph.D.
   Transmission Operations/Technical Operations Support
   Commonwealth Edison Company
   work phone: 630-691-4466/(472)-4466
   work email: mailto:david.c.schooley@ucm.com
   home email: mailto:dcschooley@ieee.org


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message

[prev in list] [next in list] [prev in thread] [next in thread]