Re: [SLE] What is this bootps message?
From: Martti Laaksonen (martti.laaksonen_at_sci.fi)
Date: 01/01/04
- Previous message: Russ: "[SLE] Nvidia Drivers"
- In reply to: Richard Atcheson: "Re: [SLE] What is this bootps message?"
- Next in thread: Sid Boyce: "Re: [SLE] What is this bootps message?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Thu, 01 Jan 2004 12:24:33 +0200 To: suse-linux-e@suse.com
Richard Atcheson wrote:
> On Wednesday 31 December 2003 11:29 pm, Sid Boyce wrote:
>
>>Richard Atcheson wrote:
>>
>>>On SuSE 9.0 running the IP Traffic I see this message quite frequently:
>>>UDP (350 bytes) from 10.54.64.1 bootps to 255.255.255.255:bootpc on eth0.
>>>
>>
>>Description: bootpc is the bootp client for Linux that will allow a
>>linux machine to retrieve it's networking information from a server via
>>the network. It sends out a general broadcast asking for the information
>>which is returned.
>> It's a broadcast request from 10.54.64.1 looking for a boot server
>>which will issue it with its network configuration and also a boot
>>image. Normally this comes from a diskless client -- it has to have a
>>NIC with a prom that's programmed to initiate the action. I don't know
>>if such a NIC is installed if it tries to boot from the network first
>>and then checks for a local boot device.
Actually, it is a reply from bootp/dhcp server to a bootp/dhcp client.
Both bootp and dhcp use the same ports for clients and servers. These
days bootp is rarely used, so I would bet on it being dhcp traffic.
As for the reasons why the bootp/dhcp server broadcast its reply there
are several which are described in RFC1542 (chapter 5.4).
>
> Ok I think I understand its purpose but I have no idea why it is appearing on
> my eth0 which is my connection to the cable modem. Is this an attempt to
> break into my machine?? My subnet is 192.168.1.0/24 I have no idea where
> the 10.0.0. stuf is coming from .
It's probably not a break-in attempt, but who's to say? It's hard to
give any definitive answers without more details.
Now, I am not 100% sure of the cable modem technology (although I used
to have one myself), but isn't cable modem a shared medium just the same
as ethernet is?
In that case, what you are seeing is probably someone else's home
network traffic.
Most likely he/she has a ethernet hub or switch connected to his/hers
cable modem, so all broadcast traffic in his/hers home network is also
transmitted over the cable modem for your viewing pleasure :)
-- Martti Laaksonen -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
- Previous message: Russ: "[SLE] Nvidia Drivers"
- In reply to: Richard Atcheson: "Re: [SLE] What is this bootps message?"
- Next in thread: Sid Boyce: "Re: [SLE] What is this bootps message?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|
