[Sheflug] igmp packets...... it's getting worse....

[ross <nospam [at] ntlworld.com>]

hi all,
this is driving me nuts!!!!!!
i've spent ages monitoring tcpdump and killing processes to try and identify 
the culpret for sending these igmp packets...
as you can see, i now also have udp packets being sent every 30 seconds...
i honestly have not modified any scripts since my first mailing on this topic 
and i am completly bafled as to where to go from here......

my ip address - 213.104.192.142

18:28:27.055052 213.105.116.217 > 224.0.0.1: igmp query [ttl 1]
18:28:57.175163 213.104.192.142.631 > 255.255.255.255.631: udp 104
18:29:28.175200 213.104.192.142.631 > 255.255.255.255.631: udp 104
18:29:59.175162 213.104.192.142.631 > 255.255.255.255.631: udp 104
18:30:30.175169 213.104.192.142.631 > 255.255.255.255.631: udp 104
18:31:01.175165 213.104.192.142.631 > 255.255.255.255.631: udp 104  

i think sendmail maybe causing the udp packets (i upgraded the sendmail 
package but used the old script - i'll go back to the old version!)

that still leaves the igmp......
the ip address(213.105.116.217 ) baffles me as it's not mine! i ran nmap on 
this and found it belongs to ntl.... seems to be the ftp server with telnet 
port also open! does this mean that 224.0.0.1 is on my machine? i tried 
logging in to the telnet port but connection was refused although it 
acknowleged my user name!

any advice on this one?
       
-- 
Thanks,
        Ross
               ross.h [at] ntlworld.com
____________________________________________________________________________
---------------------------------------------------------------------
Sheffield Linux User's Group - http://www.sheflug.co.uk
To unsubscribe from this list send mail to
- <sheflug-request [at] vuw.ac.nz> - with the word 
 "unsubscribe" in the body of the message. 

  GNU the choice of a complete generation.