Salut

Raspunsul cu udp port unreachable cel mai probabil este de la kernel 
(stiva TCP/IP) si nu generat de un proces. deci, la UDP, daca primest un 
packet UDP pe un port pe care nu asculta nici un proces, stiva TCP/IP va 
raspunde cu ICMP port unreachable.

Ca sa confirmi teoria mea, fa tcpdump -n host 206.191.0.140
(eventual "and udp")

On Tue, 16 Mar 2004, Radu Filip wrote:

> 
> salut, cum pot afla cine (ce proces) genereaza traficul icmp de mai jos? 
> mersi,radu
> 
> # tcpdump -nn 'icmp'
> 09:30:35.292778 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48481 unreachable 
> [tos 0xc0]
> 09:30:35.292799 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48490 unreachable 
> [tos 0xc0]
> 09:30:35.293218 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48496 unreachable 
> [tos 0xc0]
> 09:30:35.293890 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48501 unreachable 
> [tos 0xc0]
> 09:30:37.578780 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48507 unreachable 
> [tos 0xc0]
> 09:30:37.578806 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48514 unreachable 
> [tos 0xc0]
> 09:30:37.578823 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48533 unreachable 
> [tos 0xc0]
> 09:30:37.579191 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48533 unreachable 
> [tos 0xc0]
> 09:30:38.935208 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48446 unreachable 
> [tos 0xc0]
> 09:30:40.048350 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48447 unreachable 
> [tos 0xc0]
> 09:30:50.388731 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48458 unreachable 
> [tos 0xc0]
> 09:30:50.389193 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48458 unreachable 
> [tos 0xc0]
> 09:30:55.396141 x.y.z.t > 206.191.0.210: icmp: x.y.z.t udp port 48463 unreachable 
> [tos 0xc0]
> 09:30:55.396163 x.y.z.t > 206.191.0.210: icmp: x.y.z.t udp port 48463 unreachable 
> [tos 0xc0]
> 09:30:57.974996 x.y.z.t > 82.50.56.112: icmp: x.y.z.t udp port 137 unreachable [tos 
> 0xc0]
> 09:30:58.977871 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48467 unreachable 
> [tos 0xc0]
> 09:30:58.978150 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48478 unreachable 
> [tos 0xc0]
> 09:30:58.978176 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48489 unreachable 
> [tos 0xc0]
> 09:30:58.978430 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48495 unreachable 
> [tos 0xc0]
> 09:30:59.474654 x.y.z.t > 82.50.56.112: icmp: x.y.z.t udp port 137 unreachable [tos 
> 0xc0]
> 09:31:00.970924 x.y.z.t > 82.50.56.112: icmp: x.y.z.t udp port 137 unreachable [tos 
> 0xc0]
> 09:31:03.069171 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48477 unreachable 
> [tos 0xc0]
> 09:31:03.069355 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48488 unreachable 
> [tos 0xc0]
> 09:31:03.069577 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48494 unreachable 
> [tos 0xc0]
> 09:31:03.069805 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48499 unreachable 
> [tos 0xc0]
> 09:31:10.537810 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48491 unreachable 
> [tos 0xc0]
> 09:31:10.538011 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48497 unreachable 
> [tos 0xc0]
> 09:31:10.538208 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48502 unreachable 
> [tos 0xc0]
> 09:31:10.538408 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48508 unreachable 
> [tos 0xc0]
> 09:31:19.018355 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48500 unreachable 
> [tos 0xc0]
> 09:31:19.018572 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48506 unreachable 
> [tos 0xc0]
> 09:31:19.018863 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48510 unreachable 
> [tos 0xc0]
> 09:31:19.018879 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48530 unreachable 
> [tos 0xc0]
> 09:31:28.216327 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48561 unreachable 
> [tos 0xc0]
> 09:31:28.216572 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48561 unreachable 
> [tos 0xc0]
> 09:31:28.217071 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48586 unreachable 
> [tos 0xc0]
> 09:31:28.217324 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48600 unreachable 
> [tos 0xc0]
> 09:31:29.625291 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48636 unreachable 
> [tos 0xc0]
> 09:31:29.625530 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48643 unreachable 
> [tos 0xc0]
> 09:31:33.642460 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48655 unreachable 
> [tos 0xc0]
> 09:31:37.284275 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48542 unreachable 
> [tos 0xc0]
> 09:31:37.284296 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48569 unreachable 
> [tos 0xc0]
> 09:31:37.284311 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48574 unreachable 
> [tos 0xc0]
> 09:31:38.963885 69.31.11.17 > x.y.z.t: icmp: echo request (DF)
> 09:31:44.030473 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48570 unreachable 
> [tos 0xc0]
> 09:31:44.030654 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48570 unreachable 
> [tos 0xc0]
> 09:31:44.030858 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48570 unreachable 
> [tos 0xc0]
> 09:31:44.031056 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48570 unreachable 
> [tos 0xc0]
> 09:31:47.278833 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48648 unreachable 
> [tos 0xc0]
> 09:31:47.279146 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48653 unreachable 
> [tos 0xc0]
> 09:31:47.279311 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48660 unreachable 
> [tos 0xc0]
> 09:31:47.279470 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48672 unreachable 
> [tos 0xc0]
> 09:31:48.971108 x.y.z.t > 206.191.0.210: icmp: x.y.z.t udp port 48575 unreachable 
> [tos 0xc0]
> 09:31:48.971603 x.y.z.t > 206.191.0.210: icmp: x.y.z.t udp port 48575 unreachable 
> [tos 0xc0]
> 09:31:48.971618 x.y.z.t > 206.191.0.210: icmp: x.y.z.t udp port 48575 unreachable 
> [tos 0xc0]
> 09:31:48.972097 x.y.z.t > 206.191.0.210: icmp: x.y.z.t udp port 48575 unreachable 
> [tos 0xc0]
> 09:31:53.392836 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48583 unreachable 
> [tos 0xc0]
> 09:31:53.392855 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48597 unreachable 
> [tos 0xc0]
> 09:31:53.393317 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48606 unreachable 
> [tos 0xc0]
> 09:31:53.393809 x.y.z.t > 206.191.0.140: icmp: x.y.z.t udp port 48612 unreachable 
> [tos 0xc0]
> 
> 
> --- 
> Detalii despre listele noastre de mail: http://www.lug.ro/
> 
> 

-- 
Mihai RUSU                                    Email: [EMAIL PROTECTED]
GPG : http://dizzy.roedu.net/dizzy-gpg.txt    WWW: http://dizzy.roedu.net
                       "Linux is obsolete" -- AST

--- 
Detalii despre listele noastre de mail: http://www.lug.ro/


Raspunde prin e-mail lui