LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   Help with Windoze XP - sort of (https://www.linuxquestions.org/questions/linux-newbie-8/help-with-windoze-xp-sort-of-324864/)

nightoil 05-18-2005 09:36 PM

Help with Windoze XP - sort of
 
I've just managed to set up a little 2 box Home LAN, my machine being the gateway, and the rest of the family on a Windoze XP machine. I'm running Slack 10 and it works a treat but the XP machine is a nightmare ! It keeps sending tons of data through the LAN, of which some is destined for the internet. I've tried checkinf for adware and viruses but this made no difference, and using tcpdump I've got the IP addresses of where it's going below is a bit of it.

The XP machine is 192.168.0.11

My question is does anybody know how to stop it !

I know the answer is to put Slack on the other machine as well, in fact it's a dual boot jobbie, and it works a treat when running Slack, but the rest of the family are scared of Linux ' cos it's not the same as at work/school

10:33:07.966714 IP 192.168.0.11.2724 > 192.168.161.193.445: S 3841203871:3841203871(0) win 64240 <mss 1460,nop,nop,sackOK>
10:33:07.968874 IP 192.168.0.11.2725 > 192.168.2.135.445: S 3841238504:3841238504(0) win 64240 <mss 1460,nop,nop,sackOK>
10:33:07.969588 IP 192.168.0.11.2726 > 192.168.70.44.445: S 3841293775:3841293775(0) win 64240 <mss 1460,nop,nop,sackOK>
10:33:07.970165 IP 192.168.0.11.2727 > 192.168.146.204.445: S 3841344885:3841344885(0) win 64240 <mss 1460,nop,nop,sackOK>
10:33:07.971136 arp who-has 192.168.0.92 tell 192.168.0.11
10:33:07.987585 IP 192.168.0.11.2730 > 128.15.108.51.445: S 3841456889:3841456889(0) win 64240 <mss 1460,nop,nop,sackOK>
10:33:07.988286 IP 192.168.0.11.2731 > 45.91.99.67.445: S 3841491039:3841491039(0) win 64240 <mss 1460,nop,nop,sackOK>
10:33:07.990346 IP 192.168.0.11.2732 > 219.127.211.15.445: S 3841530252:3841530252(0) win 64240 <mss 1460,nop,nop,sackOK>
10:33:07.991056 IP 192.168.0.11.2733 > 194.253.127.241.445: S 3841593580:3841593580(0) win 64240 <mss 1460,nop,nop,sackOK>
10:33:07.994384 IP 192.168.0.11.2734 > 71.129.224.156.445: S 3841632611:3841632611(0) win 64240 <mss 1460,nop,nop,sackOK>
10:33:07.996317 IP 192.168.0.11.2735 > 158.207.114.160.445: S 3841681981:3841681981(0) win 64240 <mss 1460,nop,nop,sackOK>
10:33:07.997003 IP 192.168.0.11.2736 > 16.0.150.189.445: S 3841721979:3841721979(0) win 64240 <mss 1460,nop,nop,sackOK>
10:33:07.999112 IP 192.168.0.11.2738 > 153.179.182.156.445: S 3841757711:3841757711(0) win 64240 <mss 1460,nop,nop,sackOK>
10:33:07.999822 IP 192.168.0.11.2739 > 101.95.65.243.445: S 3841804300:3841804300(0) win 64240 <mss 1460,nop,nop,sackOK>
10:33:08.000622 IP 192.168.0.11.2740 > 41.4.94.156.445: S 3841842193:3841842193(0) win 64240 <mss 1460,nop,nop,sackOK>
10:33:08.001386 IP 192.168.0.11.2741 > 157.27.1.84.445: S 3841894862:3841894862(0) win 64240 <mss 1460,nop,nop,sackOK>
10:33:08.002086 IP 192.168.0.11.2742 > 48.9.10.179.445: S 3841953150:3841953150(0) win 64240 <mss 1460,nop,nop,sackOK>
10:33:08.009981 IP 192.168.0.11.2743 > 214.15.6.129.445: S 3841996660:3841996660(0) win 64240 <mss 1460,nop,nop,sackOK>
10:33:08.035398 IP 192.168.0.11.2744 > 163.63.46.222.445: S 3842057612:3842057612(0) win 64240 <mss 1460,nop,nop,sackOK>

ilikejam 05-18-2005 10:52 PM

Hi.

It's SMB. Exactly why your machine is trying to talk to Internet machines I don't know.
http://ntsecurity.nu/papers/port445/

Dave


All times are GMT -5. The time now is 11:52 PM.