xuvenka:/home/borxa# tcpdump -nxX -i ppp0On Fri, 2003-01-31 at 12:35, Borxa Varela wrote:principalmente en el puerto 4662 que no se para que es, y mi pregunta es ¿quien o que coño esta enviando esa cantidad de paquetes? y paso ¿porque no funciona la opción para el pppd?4662 es, hasta donde recuerdo, eDonkey. ¿No lo tienes instalado?Intenta tcpdump -nxX, para ver el contenido de los paquetes. -CR
tcpdump: listening on ppp0
03:39:37.110504 195.242.103.231.2727 > 80.103.153.85.4662: S 3344191268:3344191268(0) win 16384 <mss 1420,nop,nop,sackOK> (DF)
0x0000 4500 0030 eec0 4000 7206 0471 c3f2 67e7 [EMAIL PROTECTED].
0x0010 5067 9955 0aa7 1236 c754 4f24 0000 0000 Pg.U...6.TO$....
0x0020 7002 4000 fa5a 0000 0204 058c 0101 0402 [EMAIL PROTECTED]..........
03:39:37.110589 80.103.153.45.2727 > 80.103.153.85.4662: S 3344191268:3344191268(0) win 16384 <mss 1420,nop,nop,sackOK> (DF)
0x0000 4500 0030 eec0 4000 7106 47b6 5067 992d [EMAIL PROTECTED].-
0x0010 5067 9955 0aa7 1236 c754 4f24 0000 0000 Pg.U...6.TO$....
0x0020 7002 4000 3ca0 0000 0204 058c 0101 0402 [EMAIL PROTECTED]<...........
03:39:39.860504 80.129.23.87.4443 > 80.103.153.194.4662: S 334837410:334837410(0) win 32767 <mss 1452,nop,wscale 0,nop,nop,sackOK> (DF)
0x0000 4500 0034 7354 4000 7506 406e 5081 1757 [EMAIL PROTECTED]@nP..W
0x0010 5067 99c2 115b 1236 13f5 36a2 0000 0000 Pg...[.6..6.....
0x0020 8002 7fff 2ef7 0000 0204 05ac 0103 0300 ................
0x0030 0101 0402 ....
03:39:39.860612 80.103.153.45.4443 > 80.103.153.194.4662: S 334837410:334837410(0) win 32767 <mss 1452,nop,wscale 0,nop,nop,sackOK> (DF)
0x0000 4500 0034 7354 4000 7406 bfb1 5067 992d [EMAIL PROTECTED].-
0x0010 5067 99c2 115b 1236 13f5 36a2 0000 0000 Pg...[.6..6.....
0x0020 8002 7fff ad3a 0000 0204 05ac 0103 0300 .....:..........
0x0030 0101 0402 ....
03:39:39.960506 213.161.66.179.80 > 80.103.153.45.3186: . ack 1742567595 win 31856 <nop,nop,timestamp 74204366 229404> (DF)
0x0000 4500 0034 1b66 4000 3506 2875 d5a1 42b3 [EMAIL PROTECTED](u..B.
0x0010 5067 992d 0050 0c72 667b ade4 67dd 78ab Pg.-.P.rf{..g.x.
0x0020 8010 7c70 2d5f 0000 0101 080a 046c 44ce ..|p-_.......lD.
0x0030 0003 801c ....
03:39:39.960589 80.103.153.45.3186 > 213.161.66.179.80: . ack 1 win 21720 <nop,nop,timestamp 234192 74195535> (DF)
0x0000 4500 0034 5f66 4000 4006 d974 5067 992d [EMAIL PROTECTED]@..tPg.-
0x0010 d5a1 42b3 0c72 0050 67dd 78ab 667b ade5 ..B..r.Pg.x.f{..
0x0020 8010 54d8 64c1 0000 0101 080a 0003 92d0 ..T.d...........
0x0030 046c 224f .l"O
03:39:41.000505 62.83.42.23.2039 > 80.103.153.45.4662: S 1036079264:1036079264(0) win 8760 <mss 1460,nop,nop,sackOK> (DF)
0x0000 4500 0030 b447 4000 7506 ff81 3e53 2a17 [EMAIL PROTECTED]...>S*.
0x0010 5067 992d 07f7 1236 3dc1 50a0 0000 0000 Pg.-...6=.P.....
0x0020 7002 2238 665a 0000 0204 05b4 0101 0402 p."8fZ..........
03:39:41.000603 80.103.153.45.4662 > 62.83.42.23.2039: R 0:0(0) ack 1036079265 win 0 (DF)
0x0000 4500 0028 0000 4000 4006 e8d1 5067 992d E..([EMAIL PROTECTED]@...Pg.-
0x0010 3e53 2a17 1236 07f7 0000 0000 3dc1 50a1 >S*..6......=.P.
0x0020 5014 0000 b542 0000 P....B..
03:39:42.010503 217.127.81.42.4143 > 80.103.153.47.4662: S 3123026372:3123026372(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
0x0000 4500 0030 5bbe 4000 7206 98c9 d97f 512a [EMAIL PROTECTED]
0x0010 5067 992f 102f 1236 ba25 99c4 0000 0000 Pg././.6.%......
0x0020 7002 4000 b88f 0000 0204 05b4 0101 0402 [EMAIL PROTECTED]
03:39:42.010609 80.103.153.45.4143 > 80.103.153.47.4662: S 3123026372:3123026372(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
0x0000 4500 0030 5bbe 4000 7106 dade 5067 992d [EMAIL PROTECTED]
0x0010 5067 992f 102f 1236 ba25 99c4 0000 0000 Pg././.6.%......
0x0020 7002 4000 f9a4 0000 0204 05b4 0101 0402 [EMAIL PROTECTED]
03:39:42.110502 81.172.51.235.1739 > 80.103.153.45.4662: S 1902037634:1902037634(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
0x0000 4500 0030 700f 4000 7206 298d 51ac 33eb [EMAIL PROTECTED].).Q.3.
0x0010 5067 992d 06cb 1236 715e ca82 0000 0000 Pg.-...6q^......
0x0020 7002 4000 7f11 0000 0204 05b4 0101 0402 [EMAIL PROTECTED]
03:39:42.110631 80.103.153.45.4662 > 81.172.51.235.1739: R 0:0(0) ack 1902037635 win 0 (DF)
0x0000 4500 0028 0000 4000 4006 cba4 5067 992d E..([EMAIL PROTECTED]@...Pg.-
0x0010 51ac 33eb 1236 06cb 0000 0000 715e ca83 Q.3..6......q^..
0x0020 5014 0000 ebc1 0000 P.......
12 packets received by filter
0 packets dropped by kernel
xuvenka:/home/borxa#
Y el netstat -pA inet:
xuvenka:/home/borxa# netstat -pA inet
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 80.103.153.45:3186 213-161-66-179.akam:www ESTABLISHED 693/mozilla-bin
tcp 0 0 80.103.153.45:3187 213-161-66-179.akam:www ESTABLISHED 693/mozilla-bin
tcp 0 0 80.103.153.45:3194 213-161-66-155.akam:www ESTABLISHED 693/mozilla-bin
tcp 0 0 80.103.153.45:3178 213-161-66-155.akam:www ESTABLISHED 693/mozilla-bin
udp 0 0 localhost:1025 localhost:1025 ESTABLISHED 435/postmaster
xuvenka:/home/borxa#
