On Sun, Sep 24, 2000 at 03:30:28PM +0200, Sven Burgener wrote: > Hello > > Is the following a tcp or a udp packet? How do I tell? > > Sep 24 15:20:25 host kernel: Packet log: input DENY eth0 \ > PROTO=17 10.209.80.109:68 255.255.255.255:67 \ > L=576 S=0x00 I=9145 F=0x4000 T=32 (#11) > > This seems to be a broadcast by the DHCP server of my cable provider, > right?
$ grep 17 /etc/protocols # from: @(#)protocols 5.1 (Berkeley) 4/17/89 udp 17 UDP # user datagram protocol $ grep '\<6[78]/' /etc/services bootps 67/tcp # BOOTP server bootps 67/udp bootpc 68/tcp # BOOTP client bootpc 68/udp It's udp broadcast of DHCP _client_. Mirek