|
ru.unix.bsd
- RU.UNIX.BSD ------------------------------------------------------------------
From : Alexey Popov 2:5096/18.1 27 May 2003 23:57:41
To : All
Subject : странные пакеты Ethernet
--------------------------------------------------------------------------------
Есть роутер под FreeBSD 4.8, встроенной сетью fxp0 подключен к Интрнет, а
fxp1 - в локальную сеть к свитчу Intel Express 460T Standalone Switch. С fxp0
все хорошо, а на fxp1 непрерывно валится куча странных пакетов:
ash# tcpdump -i fxp1
tcpdump: listening on fxp1
00:03:44.577305 48:58:a:a1:5f:17 1:80:c2:0:0:1 8808 60:
0001 0000 0000 8808 0001 0000 0000 8808
0001 0000 0000 8808 0001 0000 0000 8808
0001 0000 0000 8808 0001 0000 0000
00:03:44.619232 48:58:a:a1:5f:17 1:80:c2:0:0:1 8808 60:
0001 0000 0000 8808 0001 0000 0000 8808
0001 0000 0000 8808 0001 0000 0000 8808
0001 0000 0000 8808 0001 0000 0000
00:03:44.661173 48:58:a:a1:5f:17 1:80:c2:0:0:1 8808 60:
0001 0000 0000 8808 0001 0000 0000 8808
0001 0000 0000 8808 0001 0000 0000 8808
0001 0000 0000 8808 0001 0000 0000
ash# tethereal -V -i fxp1 -c 3
Capturing on fxp1
Frame 1 (60 bytes on wire, 60 bytes captured)
Arrival Time: May 28, 2003 00:07:41.446390000
Time delta from previous packet: 0.000000000 seconds
Time relative to first packet: 0.000000000 seconds
Frame Number: 1
Packet Length: 60 bytes
Capture Length: 60 bytes
Ethernet II, Src: 48:58:0a:a1:5f:17, Dst: 01:80:c2:00:00:01
Destination: 01:80:c2:00:00:01 (01:80:c2:00:00:01)
Source: 48:58:0a:a1:5f:17 (48:58:0a:a1:5f:17)
Type: Unknown (0x8808)
Data (46 bytes)
0000 00 01 00 00 00 00 88 08 00 01 00 00 00 00 88 08 ................
0010 00 01 00 00 00 00 88 08 00 01 00 00 00 00 88 08 ................
0020 00 01 00 00 00 00 88 08 00 01 00 00 00 00 ..............
Frame 2 (60 bytes on wire, 60 bytes captured)
Arrival Time: May 28, 2003 00:07:41.488328000
Time delta from previous packet: 0.041938000 seconds
Time relative to first packet: 0.041938000 seconds
Frame Number: 2
Packet Length: 60 bytes
Capture Length: 60 bytes
Ethernet II, Src: 48:58:0a:a1:5f:17, Dst: 01:80:c2:00:00:01
Destination: 01:80:c2:00:00:01 (01:80:c2:00:00:01)
Source: 48:58:0a:a1:5f:17 (48:58:0a:a1:5f:17)
Type: Unknown (0x8808)
Data (46 bytes)
0000 00 01 00 00 00 00 88 08 00 01 00 00 00 00 88 08 ................
0010 00 01 00 00 00 00 88 08 00 01 00 00 00 00 88 08 ................
0020 00 01 00 00 00 00 88 08 00 01 00 00 00 00 ..............
Frame 3 (60 bytes on wire, 60 bytes captured)
Arrival Time: May 28, 2003 00:07:41.530261000
Time delta from previous packet: 0.041933000 seconds
Time relative to first packet: 0.083871000 seconds
Frame Number: 3
Packet Length: 60 bytes
Capture Length: 60 bytes
Ethernet II, Src: 48:58:0a:a1:5f:17, Dst: 01:80:c2:00:00:01
Destination: 01:80:c2:00:00:01 (01:80:c2:00:00:01)
Source: 48:58:0a:a1:5f:17 (48:58:0a:a1:5f:17)
Type: Unknown (0x8808)
Data (46 bytes)
0000 00 01 00 00 00 00 88 08 00 01 00 00 00 00 88 08 ................
0010 00 01 00 00 00 00 88 08 00 01 00 00 00 00 88 08 ................
0020 00 01 00 00 00 00 88 08 00 01 00 00 00 00 ..............
ash# ifconfig fxp1
fxp1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.169.1 netmask 0xffffff00 broadcast 192.168.169.255
ether 00:90:27:1d:74:43
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
ash#
Откуда берутся такие пакеты и что с этим делать?
Если виноват свитч, вторая часть вопроса. Известно, что свитч администрируется
через Telnet, известен логин и пароль, но неизвестен его IP-адрес, а ехать туда
с консолью далеко. Как с сервера определить адрес свитча?
===
fxp0: <Intel Pro/100 Ethernet> port 0xdf00-0xdf3f mem 0xff6ff000-0xff6fffff irq
3 at device 8.0 on pci1
fxp0: Ethernet address 00:03:47:d7:59:95
inphy0: <i82562ET 10/100 media interface> on miibus0
inphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
fxp1: <Intel Pro 10/100B/100+ Ethernet> port 0xdf80-0xdf9f mem 0xff800000-0xff8f
ffff,0xf6aff000-0xf6afffff irq 5 at device 9.0 on pci1
fxp1: Ethernet address 00:90:27:1d:74:43
inphy1: <i82555 10/100 media interface> on miibus1
inphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
===
С уважением, Alexey 27 мая 2003 года
... [Eastside] [MSTU ASF] [Drum&bass] [ICQ: 165346831]
--- GoldED/W32 3.0.1
* Origin: Internet support by Flex ISP http://www.flex.ru (2:5096/18.1)
Вернуться к списку тем, сортированных по: возрастание даты уменьшение даты тема автор
|
