On Tue, 2003-09-02 at 20:01, NfoCipher wrote: > On Tue, 2003-09-02 at 18:51, christopher j bottaro wrote: > > i have a similar problem. the recv light on my cable modem is >constantly< on > > (even if all my computers are off). all my computers are behind a linksys > > cable router/firewall. i'd like to find out what ip address all this > > incoming traffic is coming from. how can i do this? > > > That's just the nature of cable modems. All the cable modem customers in > your area are on one big network loop. So you get all the traffic they > get. Some cable companies actually use switches, but most don't. It's > sorta like having your network on a hub rather than a switch. Makes for > some funny packet sniffing if you get really bored.
To be more precise, it's likely some combination (recipe?) of arp, router multicast, netbios broadcasts, subseven portscans and worm attacks. If you're really curious, hook up a secure linux/*BSD box to the cable modem and tcpdump all traffic. :} -- Jason Dixon, RHCE DixonGroup Consulting http://www.dixongroup.net -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
