[oclug] ET Phone Home! (was Networking Query from a new newbie)

[Philippe Tanguay]

On Sat, 2 Mar 2002, Brian A McKee wrote:
> My router is the 198.168.0.254, my linux box 198.168.0.2
> and 216.148.218.165 is rhns.redhat.com

It looks like your system is trying to connect to the redhat network using
secure http.... RedHat netowkr is their automated update program, from what I
can tell... So there must be some application on your RH box that
triggers that.  However, I don't speak redhat, so I can't help you there. 

> This transaction runs another minute and half and 70 packets.
> I was hoping this excerpt was enough for someone on this list to recognize?
> Looking at this output, I obviously know less about TCP/IP than I thought I 
> did.
> Brian
> 
> 01:38:50.052019 eth0 > arp who-has 192.168.0.254 tell 192.168.0.2 
> (0:50:ba:be:59:65)
> 01:38:50.052019 eth0 < arp reply 192.168.0.254 is-at 0:0:c0:51:e8:c1 
> (0:50:ba:be:59:65)
> 01:38:50.052019 eth0 > 192.168.0.2.1025 > 192.168.0.254.domain: 53213+ A? 
> www.rhns.redhat.com. (37) (DF)
> 01:38:50.102019 eth0 < 192.168.0.254.domain > 192.168.0.2.1025: 53213 1/0/0 A 
> 216.148.218.165 (53) (DF)
> 01:38:50.112019 eth0 > 192.168.0.2.1041 > 216.148.218.165.https: S 
> 3514700584:3514700584(0) win 5840 <mss 1460,sackOK,timestamp 1463009 
> 0,nop,wscale 0> (DF)
> 01:38:53.112019 eth0 > 192.168.0.2.1041 > 216.148.218.165.https: S 
> 3514700584:3514700584(0) win 5840 <mss 1460,sackOK,timestamp 1463309 
> 0,nop,wscale 0> (DF)
> 
> -- 
> Two goldfish are trying out their new tank.
> One says to the other "You take the guns - I'll drive"
> _______________________________________________
> oclug mailing list
> oclug at lists.oclug.on.ca
> http://www.oclug.on.ca/mailman/listinfo/oclug
> 
>