[rlug] Re: trafic neexplicat

[Mihai Badici]

De la vreun virus?

gabriel smolar wrote:

>cand dau: cat /proc/net/ip_conntrack, majoritatea liniilor sunt de forma:
>----
>tcp 6 359867 ESTABLISHED src=192.168.1.1 dst=192.168.1.184 sport=59975 dport=80 
>[UNREPLIED]
>src=192.168.1.184 dst=192.168.1.1 sport=80 dport=59975 use=1
>tcp 6 359867 ESTABLISHED src=192.168.1.1 dst=192.168.1.185 sport=59974 dport=80 
>[UNREPLIED]
>src=192.168.1.185 dst=192.168.1.1 sport=80 dport=59974 use=1
>tcp 6 359867 ESTABLISHED src=192.168.1.1 dst=192.168.1.185 sport=59975 dport=80 
>[UNREPLIED]
>src=192.168.1.185 dst=192.168.1.1 sport=80 dport=59975 use=1
>tcp 6 359867 ESTABLISHED src=192.168.1.1 dst=192.168.1.186 sport=59974 dport=80 
>[UNREPLIED]
>src=192.168.1.186 dst=192.168.1.1 sport=80 dport=59974 use=1
>tcp 6 359867 ESTABLISHED src=192.168.1.1 dst=192.168.1.186 sport=59975 dport=80 
>[UNREPLIED]
>src=192.168.1.186 dst=192.168.1.1 sport=80 dport=59975 use=1
>tcp 6 359867 ESTABLISHED src=192.168.1.1 dst=192.168.1.187 sport=59974 dport=80 
>[UNREPLIED]
>src=192.168.1.187 dst=192.168.1.1 sport=80 dport=59974 use=1
>tcp 6 359867 ESTABLISHED src=192.168.1.1 dst=192.168.1.187 sport=59975 dport=80 
>[UNREPLIED]
>src=192.168.1.187 dst=192.168.1.1 sport=80 dport=59975 use=1
>tcp 6 359867 ESTABLISHED src=192.168.1.1 dst=192.168.1.188 sport=59974 dport=80 
>[UNREPLIED]
>src=192.168.1.188 dst=192.168.1.1 sport=80 dport=59974 use=1
>----
>sport e in jur de 56000 pana in 59000 si ceva, dst e 192.168.1.* (nu conteaza daca 
>ip-u e alocat sau nu). 192.168.1.1 e un slack 8.1 cu rol de router pentru 
>192.168.1.x. Pe router ruleaza doar sshd si cateva reguli de firewall. Nu imi dau 
>seama de unde toate cererile alea de pe router catre tot lanu pe portu 80.
>
>
>
>
>.
>
>  
>