On Sun, Sep 24, 2000 at 03:30:28PM +0200, Sven Burgener wrote: > Is the following a tcp or a udp packet? How do I tell? > Sep 24 15:20:25 host kernel: Packet log: input DENY eth0 \ > PROTO=17 10.209.80.109:68 255.255.255.255:67 \ > L=576 S=0x00 I=9145 F=0x4000 T=32 (#11)
The key here is the "PROTO=" part: [EMAIL PROTECTED]:pts/2:~]$ grep udp /etc/protocols udp 17 UDP # user datagram protocol [EMAIL PROTECTED]:pts/2:~]$ grep tcp /etc/protocols tcp 6 TCP # transmission control protocol > This seems to be a broadcast by the DHCP server of my cable provider, > right? 67 == BOOTP server, 68 == BOOTP client. It appears to be a machine (10.209.80.109) broadcasting a request for an IP address (DHCP). -jg -- Jeremy L. Gaddis <[EMAIL PROTECTED]>
