Re: mysterious network activity every 10 secs

[tolls <tolls_(_at_)_kencaryl_(_dot_)_net>]

Well, I tried tcpdump and I just wasn't getting the hang of it so I
installed ethereal and it was a little easier.  The info I got from a
few minutes of sniffing was that these are OSPF transmissions.  I had
to look that up on google but they're apparently "Open Shortest Path
First" messages.  But I'm still not sure why this just started and
whether I should be concerned about it.  Is this a problem?  Thanks
for the help in getting the info and for any additional advice that
can be offered.  Thanks.

James


On Thu, 14 Feb 2002 20:54:49 -0700
tolls <tolls_(_at_)_kencaryl_(_dot_)_net> wrote:

> I don't know if I should be addressing this on misc@ or maybe on
> ports@ since it started after I installed three packages.  But
here's
> the problem.  I installed 2 packages to setup linux_compat:
> redhat_base-6.2p2
> redhat_motif-2.1.30
> And then I installed this port:
> opera-5.05tp1p1
> 
> Since installing all three I've noticed ethernet traffic on my
Gkrellm
> monitor every 10 seconds.  It just looks like a small ping or
> something.  I've checked top -S and don't see anything that wasn't
> there before.  Additionally, I pkg_delete the opera port to see if
it
> was the problem.  The mysterious ethernet traffic continues.  I've
> never had to track down rogue ethernet traffic before.  What do I
use
> to investigate this?  Some type of packet sniffer?  ntop?  Is there
an
> easy way to find out the IP that this traffic is directed at or what
> piece of software is generating this activity?  Any suggestions
would
> be appreciated.  Thanks.
> 
> James