These look like OSPF routing updates from your ISP. Try using the following filter
rule:
ignore ip ip.proto=89
Bob...
"Rusman E. Priyana" wrote:
> Hi again,
>
> Thanks for the many replies from the list.
> First of all, I must clarify that I got this diald won't hang up problem in
> my diald machine.
> No win9x clients were on when it happen.
>
> When I use tcpdump -i ppp0 while idle,
> I am getting the following result:
>
> 13:47:46.385313 < 203.117.32.234 > OSPF-ALL.MCAST.NET: OSPFv2-hello 44:
> area 0.0.0.1 [tos 0xc0] [ttl 1]
> 13:47:46.397859 > nas9-59-194.mystarhub.com.sg.1027 >
> sbsecdns.mystarhub.com.sg.domain: 4395+ PTR? 5.0.0.224.in-addr.arpa. (40)
> 13:47:46.535307 < sbsecdns.mystarhub.com.sg.domain >
> nas9-59-194.mystarhub.com.sg.1027: 4395 1/4/4 PTR OSPF-ALL.MCAST.NET. (241)
> (DF)
> 13:47:46.535869 > nas9-59-194.mystarhub.com.sg.1027 >
> sbsecdns.mystarhub.com.sg.domain: 4396+ PTR? 234.32.117.203.in-addr.arpa. (45)
> 13:47:46.645305 < sbsecdns.mystarhub.com.sg.domain >
> nas9-59-194.mystarhub.com.sg.1027: 4396 NXDomain* 0/1/0 (134) (DF)
> 13:47:46.645739 > nas9-59-194.mystarhub.com.sg.1027 >
> sbsecdns.mystarhub.com.sg.domain: 4397+ PTR? 1.0.0.0.in-addr.arpa. (38)
> 13:47:46.755295 < sbsecdns.mystarhub.com.sg.domain >
> nas9-59-194.mystarhub.com.sg.1027: 4397 NXDomain 0/1/0 (124) (DF)
> 13:47:46.755745 > nas9-59-194.mystarhub.com.sg.1027 >
> sbsecdns.mystarhub.com.sg.domain: 4398+ PTR? 19.33.117.203.in-addr.arpa. (44)
> 13:47:46.875293 < sbsecdns.mystarhub.com.sg.domain >
> nas9-59-194.mystarhub.com.sg.1027: 4398* 1/2/2 PTR
> sbsecdns.mystarhub.com.sg. (175) (DF)
> 13:47:46.875708 > nas9-59-194.mystarhub.com.sg.1027 >
> sbsecdns.mystarhub.com.sg.domain: 4399+ PTR? 194.59.117.203.in-addr.arpa. (45)
> 13:47:46.995312 < sbsecdns.mystarhub.com.sg.domain >
> nas9-59-194.mystarhub.com.sg.1027: 4399* 1/2/2 PTR
> nas9-59-194.mystarhub.com.sg. (188) (DF)
> 13:47:56.385320 < 203.117.32.234 > OSPF-ALL.MCAST.NET: OSPFv2-hello 44:
> area 0.0.0.1 [tos 0xc0] [ttl 1]
> 13:48:06.385299 < 203.117.32.234 > OSPF-ALL.MCAST.NET: OSPFv2-hello 44:
> area 0.0.0.1 [tos 0xc0] [ttl 1]
> 13:48:16.385322 < 203.117.32.234 > OSPF-ALL.MCAST.NET: OSPFv2-hello 44:
> area 0.0.0.1 [tos 0xc0] [ttl 1]
>
> (.... and the last 3 lines repeats every second)
>
>
--
---------------------------------------------------------
Bob Chiodini [EMAIL PROTECTED]
---------------------------------------------------------
-
To unsubscribe from this list: send the line "unsubscribe linux-diald" in
the body of a message to [EMAIL PROTECTED]
