Re: [Sheflug] igpm packets?

["Chris J/#6" <nospam [at] nccnet.co.uk>]

> hi all,
> 
> i've recently aquired a problem with pppd running in demand mode......
> 
> it works great appart from the fact that it is always dialing a connection!
> 
> i used the same options file as on another working pppd install so i know the 
> script is ok....
> 
> pppd seems to be kept running a packet generated every two minutes?
> i ran tcpdump on ppp0 and found the following...
> 
> 22:10:24.898668 213.105.116.217 > 224.0.0.1: igmp query [ttl 1]
> 22:12:23.708656 213.105.116.217 > 224.0.0.1: igmp query [ttl 1] 
> 
> the ip address is not the one allocated to me by my isp so, i guess these are 
> incomming packets?
> 
> can anyone help with this one?
> 

Well...as to what the packets are...for some reason, the host:

[126%][infinitum][packages] >host 213.105.116.117
117.116.105.213.IN-ADDR.ARPA domain name pointer m53-mp2-cvx1b.lin.ntl.com
[127%][infinitum][packages] >

is sending packets to the multi-cast address 224.0.0.1 ... why, I don't know. 
Is that NTL machine a dial-up modem or one of NTL's machines? ie, is it NTL 
causing the problem or an NTL user? I don't know how NTL name their modems, 
so this is a problem :)

However, if you don't have a ppp connection that is active, how can pppd know 
how that the packet is incoming? Your modem is hung up, therefore the remote 
modem is also hung up, ipso you are not logged on and that packet can 
therefore never reach you. I think you need to look closer to home...do you 
have DNS or Samba running on your machine (ie, outgoing DNS updates or SMB 
name server probes/requests)?

DNS is likely to be the biggest problem, if running. And having never used 
demand dialling of any description, you may need to investigate further :) 
But I'm offereing starting points for services to look for that you may have.

Chris...



-- 
Chris Johnson            \  "If not for me then, do it for yourself. If not
sixie@nccnet.co.uk        \  for then do it for the world." -- Stevie Nicks
www.nccnet.co.uk/~sixie/   ~---------------------------------------+
Redclaw chat - http://redclaw.org.uk - telnet redclaw.org.uk 2000   \______


---------------------------------------------------------------------
Sheffield Linux User's Group - http://www.sheflug.co.uk
To unsubscribe from this list send mail to
- <sheflug-request [at] vuw.ac.nz> - with the word 
 "unsubscribe" in the body of the message. 

  GNU the choice of a complete generation.