Buna ziua tuturor, Sunt conectat, la o retea de bloc, gateway Fedora1 , eu pe statie Slackare-10 Proprietarul gateway-ului cu "tcpdump -i eth1" supravegheaza traficul pe reteaua interna (eth0 e pentru iesire la internet) si a afirmat ca a vazut multe pachete ce contin specificatia "nop", si pe indivizii respectivi (IP-urile respective) ii deconecteaza (??!!??)) Pe mine DOAR ma atentionat...... sub pretextul ca sunt virushi !!!!???!!! Pina la proba contrare toata lumea are dreptate... Nu sunt un guru, si am facut la slujba un test, de pe calcul meu(birou-tehnic) am upload-at pe alt calc (COMERCIAL) un fisier, si am monitorizat cu "tcpdump ip host birou-tehnic comercial" traficul intre cele doua compuri, iata o scurta secventa:
################################################################################### tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes 10:02:47.182248 IP birou-tehnic.localdomain.33340 > COMERCIAL.netbios-ssn: . 2254904594:2254906042(1448) ack 1907684815 win 16080 <nop,nop,timestamp 7572982 58869> NBT Packet 10:02:47.185194 IP COMERCIAL.netbios-ssn > birou-tehnic.localdomain.33340: . ack 4294955704 win 17520 <nop,nop,timestamp 58869 7572964> 10:02:47.185310 IP birou-tehnic.localdomain.33340 > COMERCIAL.netbios-ssn: . 1448:2896(1448) ack 52 win 16080 <nop,nop,timestamp 7572986 58869> NBT Packet 10:02:47.185262 IP COMERCIAL.netbios-ssn > birou-tehnic.localdomain.33340: . ack 4294957156 win 16068 <nop,nop,timestamp 58869 7572964> ###################################################################################### Trag concluzia , gresita sau nu, va rog spuneti-mi ca acest "nop apare cind se face download/upoload ??? Ce este de fapt ? (El sustine ca e virus, incorect, presupun, ca eu de pe linux lucrez) Multumesc de ajutor !! --- Detalii despre listele noastre de mail: http://www.lug.ro/
