Re: [TCLUG:2783] diald and samba triggering

[Nate Carlson <natecars@infiniteloop.com>]

Ben,

I would run a packet sniffer on your netork capturing all data including
source and destination addresses (timestamped, of course) and then look at
the packets in the approximate time where diald makes the connection, find
the ones going outside the network, find the source address, and bingo!
you've got the culprit. :P

----
Nate Carlson
The Infinite Loop
natecars@infiniteloop.com

On Sun, 13 Dec 1998, Ben Luey wrote:

> I was looking a log file of when my linux server doing ip-masq dials to
> the internet via diald. Every hour, even on weekends when no one was
> around), diald would go one and off for about 6 minutes at the beginning
> of the hour. It wasn't totally consistent but always within the first ten
> minutes of the hour. There wasn't this regularly during the weekdays (off
> from 11:30 - 1:30 for example) but then it was going on and off regularly. 
> 
> We have only win95 clients at the office and a few are left on all the
> time (except for the reboot). Could they somehow be triggering diald? I
> have no entries in /etc/cron.hourly and the irregularity makes me of the
> win95 clients. The linux server is running samba and is the master
> browser. Could some lookups be triggering this? How can I trace the source
> and stop it?
> 
> Thanks,
> 
> Ben
> 
> 
> 
> 
> Ben Luey
> lueyb@carleton.edu
> ICQ: 19144397
> 
> Eagles can soar, but weasels don't get sucked into jet engines"  -- Unknown
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tclug-list-unsubscribe@listserv.real-time.com
> For additional commands, e-mail: tclug-list-help@listserv.real-time.com
> Try our website: http://tclug.real-time.com
>