Hello,

I have attached a file to this email which is part of the output of my ppp0
device.

My IP address during this connection was 202.85.95.149

I left my linux box completely idle when I was taking this output.

As you can see that my computer keeps sending packets to 202.77.134.132.
I did a reverse lookup and this is a web site to which I have never ever been
to in my life.

The problem is that these packets keep the link alive even when I am not doing
anything. Even Netscape was not running. This happens very and everytime it is
one or the other website that my machine keeps contacting. Sometimes I can see
activity which does not involove my IP address at all and even that keeps the
link up.

I have spent a long time trying to find the source but failed. Please advice
how I can stop this from happening.

It is the same in both diald 0.16.5 and 0.99.1
I have named running as a caching slave server but even if I stop named it does
not stop these packets.

Thanks in advance
Vikash.
23:17:04.785743 202.85.95.149.1030 > 202.77.134.132.www: R 1380778020:1380778020(0) 
win 0
23:17:27.125584 202.77.134.132.www > 202.85.95.149.1153: F 0:0(0) ack 1 win 32120 (DF)
23:17:27.125734 202.85.95.149.1153 > 202.77.134.132.www: R 1238228:1238228(0) win 0
23:18:12.705586 202.77.134.132.www > 202.85.95.149.1148: F 0:0(0) ack 1 win 32120 (DF)
23:18:12.705737 202.85.95.149.1148 > 202.77.134.132.www: R 1110264:1110264(0) win 0
23:18:24.755622 202.77.134.132.www > 202.85.95.149.1032: P 37649:39097(1448) ack 360 
win 31856 <nop,nop,timestamp 201034836 53470> (DF)
23:18:24.755789 202.85.95.149.1032 > 202.77.134.132.www: R 1399718680:1399718680(0) 
win 0
23:19:27.125588 202.77.134.132.www > 202.85.95.149.1153: F 0:0(0) ack 1 win 32120 (DF)
23:19:27.125745 202.85.95.149.1153 > 202.77.134.132.www: R 1238228:1238228(0) win 0
23:20:24.765650 202.77.134.132.www > 202.85.95.149.1032: P 37649:39097(1448) ack 360 
win 31856 <nop,nop,timestamp 201046836 53470> (DF)
23:20:24.765823 202.85.95.149.1032 > 202.77.134.132.www: R 1399718680:1399718680(0) 
win 0
23:21:04.795600 202.77.134.132.www > 202.85.95.149.1030: F 18759:18759(0) ack 351 win 
31856 <nop,nop,timestamp 201050868 52420>
(DF)
23:21:04.795759 202.85.95.149.1030 > 202.77.134.132.www: R 1380778020:1380778020(0) 
win 0
23:22:24.775652 202.77.134.132.www > 202.85.95.149.1032: P 37649:39097(1448) ack 360 
win 31856 <nop,nop,timestamp 201058836 53470> (DF)
23:22:24.775822 202.85.95.149.1032 > 202.77.134.132.www: R 1399718680:1399718680(0) 
win 0
23:23:04.805599 202.77.134.132.www > 202.85.95.149.1030: F 18759:18759(0) ack 351 win 
31856 <nop,nop,timestamp 201062868 52420>
(DF)
23:23:04.805758 202.85.95.149.1030 > 202.77.134.132.www: R 1380778020:1380778020(0) 
win 0
23:24:24.785645 202.77.134.132.www > 202.85.95.149.1032: P 37649:39097(1448) ack 360 
win 31856 <nop,nop,timestamp 201070836 53470> (DF)

Reply via email to