Vikash wrote:
> Hello,
>
> I have attached a file to this email which is part of the output of my ppp0
> device.
>
> My IP address during this connection was 202.85.95.149
>
> I left my linux box completely idle when I was taking this output.
>
> As you can see that my computer keeps sending packets to 202.77.134.132.
> I did a reverse lookup and this is a web site to which I have never ever been
> to in my life.
>
> The problem is that these packets keep the link alive even when I am not doing
> anything. Even Netscape was not running. This happens very and everytime it is
> one or the other website that my machine keeps contacting. Sometimes I can see
> activity which does not involove my IP address at all and even that keeps the
> link up.
>
>
I'd be interested in seeing the output of a netstat -an. At least the first 50
lines or so. The IP address is for a web hosting site in Hong Kong. It could
have been related to an advertisement on another web page you viewed. If the ppp
connection shuts down before the final tcp.fin, the connection will be redialed
and you will likely get a different IP address from your ISP and it will then
appear that traffic unrelated to your current IP address is passing thru your
interface. The tcp.fin traffic will finally time out and be dropped.
Placing 'ignore tcp tcp.fin' in your diald filter may help this specific problem.
Bob...
--
--------------------------------------------------------
Bob Chiodini [EMAIL PROTECTED]
--------------------------------------------------------
-
To unsubscribe from this list: send the line "unsubscribe linux-diald" in
the body of a message to [EMAIL PROTECTED]
