Re: [TCLUG:2783] diald and samba triggering

[Ben Luey <lueyb@carleton.edu>]

> I would run a packet sniffer on your netork capturing all data including
> source and destination addresses (timestamped, of course) and then look at
> the packets in the approximate time where diald makes the connection, find
> the ones going outside the network, find the source address, and bingo!
> you've got the culprit. :P

Any recommendations on a program that will do this (and makes one log
file, unlike sniffit)

> 
> ----
> Nate Carlson
> The Infinite Loop
> natecars@infiniteloop.com
> 
> On Sun, 13 Dec 1998, Ben Luey wrote:
> 
> > I was looking a log file of when my linux server doing ip-masq dials to
> > the internet via diald. Every hour, even on weekends when no one was
> > around), diald would go one and off for about 6 minutes at the beginning
> > of the hour. It wasn't totally consistent but always within the first ten
> > minutes of the hour. There wasn't this regularly during the weekdays (off
> > from 11:30 - 1:30 for example) but then it was going on and off regularly. 
> > 
> > We have only win95 clients at the office and a few are left on all the
> > time (except for the reboot). Could they somehow be triggering diald? I
> > have no entries in /etc/cron.hourly and the irregularity makes me of the
> > win95 clients. The linux server is running samba and is the master
> > browser. Could some lookups be triggering this? How can I trace the source
> > and stop it?
> > 
> > Thanks,
> > 
> > Ben
> > 
> > 
> > 
> > 
> > Ben Luey
> > lueyb@carleton.edu
> > ICQ: 19144397
> > 
> > Eagles can soar, but weasels don't get sucked into jet engines"  -- Unknown
> > 
> > 
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: tclug-list-unsubscribe@listserv.real-time.com
> > For additional commands, e-mail: tclug-list-help@listserv.real-time.com
> > Try our website: http://tclug.real-time.com
> > 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tclug-list-unsubscribe@listserv.real-time.com
> For additional commands, e-mail: tclug-list-help@listserv.real-time.com
> Try our website: http://tclug.real-time.com
> 

Ben Luey
lueyb@carleton.edu
ICQ: 19144397

It's only work if somebody makes you do it.  -- Calvin