On Thu, Jan 09, 2003 at 12:15:16PM -0600, Dennis Wicks wrote: > tcpdump -i eth0 -c 10 > device eth0 entered promiscuous mode > tcpdump: listening on eth0 > 11:55:15.118933 ipsrvcs3.cdg.ws.netbios-dgm > 10.80.20.255.netbios-dgm: > >>> NBT UDP PACKET(138) Res=0x110E ID=0xD923 IP=10 (0xa).80 (0x50).20 > (0x14).63 (0x3f) Port=138 (0x8a) Length=199 (0xc7) > SourceName=IPSRVCS3 NameType=0x20 (Server) > DestName= > [...] > |domain] 11:55:15.129341 arsenic.cdg.ws.1057 > > ipsrvcs1.cdg.ws.domain: 27212+ PTR? 61.20.80.10.in-addr.arpa. (42) (DF)
These are NetBIOS datagrams, probably from samba (unless you have a Windows machine on the same broadcast segment ;-) ). -- - mdz
