If you go visit these offending IP addresses (some of which do not have any domain
name attached - how can that be?) you'll probably find that they are banner ad
servers. These banner ads are often dynamic, changing every few seconds. They want
you to stay connected so you can keep seeing the next ad, and the next, and the
next...
If you can collect all the relevant IP addresses I think you can write diald filter
rules which match on the IP address in the packet header, to stop these packets
keeping the link up.
One other thing - make sure you have a filter rule to ignore the tcp.fin packet -
otherwise if you close down the browser after the link has shut down, it can bring
the link up just to say goodbye to the last site it visited.
Vikash wrote:
> Hello,
>
> I have attached a file to this email which is part of the output of my ppp0
> device.
>
> My IP address during this connection was 202.85.95.149
>
> I left my linux box completely idle when I was taking this output.
>
> As you can see that my computer keeps sending packets to 202.77.134.132.
> I did a reverse lookup and this is a web site to which I have never ever been
> to in my life.
>
> The problem is that these packets keep the link alive even when I am not doing
> anything. Even Netscape was not running. This happens very and everytime it is
> one or the other website that my machine keeps contacting. Sometimes I can see
> activity which does not involove my IP address at all and even that keeps the
> link up.
>
> I have spent a long time trying to find the source but failed. Please advice
> how I can stop this from happening.
>
> It is the same in both diald 0.16.5 and 0.99.1
> I have named running as a caching slave server but even if I stop named it does
> not stop these packets.
>
> Thanks in advance
> Vikash.
>
> ------------------------------------------------------------------------
> Name: ppp0
> ppp0 Type: Plain Text (text/plain)
> Encoding: base64
--
[EMAIL PROTECTED] Ralph Clark, Virgo Solutions Ltd (UK)
__ _
/ / (_)__ __ ____ __ * Powerful * Flexible * Compatible * Reliable *
/ /__/ / _ \/ // /\ \/ / *Well Supported * Thousands of New Users Every Day*
/____/_/_//_/\_,_/ /_/\_\ The Cost Effective Choice - Linux Means Business!
-
To unsubscribe from this list: send the line "unsubscribe linux-diald" in
the body of a message to [EMAIL PROTECTED]
