> Does trafshow have an option to do numeric output only (like `route > -n'?) If you can find the protocol number, you can drop things that Below is the output from trafshow and trafshow -n. The -n stop dns resolution, but trafshow doesn't recognize the protocol type (igmp) and doesn't display an port numbers. ipchains doesn't seem to filter igmp since /sbin/ipchains -A input -p all -j REJECT -s 224.0.0.0/8 -i ppp0 -d $ALL /sbin/ipchains -A input -p all -j REJECT -d 224.0.0.0/8 -i ppp0 -s $ALL /sbin/ipchains -A output -p all -j REJECT -s 224.0.0.0/8 -i ppp0 -d $ALL /sbin/ipchains -A output -p all -j REJECT -d 224.0.0.0/8 -i ppp0 -s $ALL does nothing ($ALL=0.0.0.0/0) > way. Also, if you don't use any multicast apps, you can probably just > block the whole 224.0.0.0/8 network. How? I don't use any multicast apps. But if I can't block it with ipchains, what can I use. > Do you have any strange daemons running that shouldn't be? I suppose > the first thing that comes to mind is mrouted, the multicast routing > daemon. I'm not even running routed, so I don't know what daemon could be the problem. Any idea? Thanks, Ben On Mon, 26 Feb 2001, Michael Hicks wrote: > Ben Luey wrote: > > > > I have pppd installed on our server to dial on demant for windows 95 > > clients. Recently, I've noticed that the link is never going down and even > > when all the computers are off, pppd stays active. I ran trafshow and I > > keep seeing this line: > > > > unkn 192.168.254.1 224.0.0.13 30 > > unkn 192.168.254.1* PIM-ROUTERS.MCAST.N 60 > > > > Going down the ppp0 line. What is this? Our ISP recently made some server > > changes -- is this related. What is ths PIM-Routers.mcast.net server at > > 244.0.0.13? Why is the protocol unknown? I tried rejecting the > > conenctions with ipchains, but it doesn't work, I think because the > > protocol is unknown. > > > -- > _ _ _ _ _ ___ _ _ _ ___ _ _ __ Suicidal twin kills > / \/ \(_)| ' // ._\ / - \(_)/ ./| ' /(__ sister by mistake! > \_||_/|_||_|_\\___/ \_-_/|_|\__\|_|_\ __) > [ Mike Hicks | http://umn.edu/~hick0088/ | mailto:hick0088 at tc.umn.edu ] > _______________________________________________ > tclug-list mailing list > tclug-list at mn-linux.org > https://mailman.mn-linux.org/mailman/listinfo/tclug-list >