closed computer receiving data

cristi1979 · 07-09-2003, 10:15 PM

i have a computer on my network who is receiving data from the net. I closed the computer, but the packets are still coming.
Is there a way to stop the traffic, or to find out from what ip i get it?

thank you

Capt_Caveman · 07-10-2003, 01:02 AM

If you really want to stop it, unplug it from the internet. But assuming that's not what you meant, you can:
1. Shut down that interface with ifdown <interface>

-or-

2. Add an iptables rule to drop traffic from that ip address

iptables -I INPUT -s 123.456.789.1 -j DROP

If you want to see the IP it's coming from, you can use tcpdump or if you would rather a GUI try ethereal out. That should give you an idea of the IP address, port number, and depending on the protocol you can even read the body of the packet.

cristi1979 · 07-11-2003, 12:22 AM

thank you