network packets to port 40118

Shango Oluwa shango at mewe.org.uk
Sat Nov 13 16:39:41 UTC 2004


Greetings the List,

UbuntuLinux is a great advance in the OS sector and our organisation,
MeWe is supporting this project's development.

Installing across several laptops & workstations (some of them PII 266)
was a relaxed process with a few minor obstacles that my team & I 
solved easily. However, an internal router is showing intermittent
packets (approx. every 17 mins.) coming from UbuntuLinux machines 
and destined for an upstream server's port 40118.

Examples:

Nov 13 11:11:00 malcolmx Shorewall:all2all:REJECT: IN=eth1 OUT=eth0
MAC=aa.bb.cc.dd.ee SRC=192.x.y.z DST=192.p.q.r LEN=60 TOS=00 PREC=0x00
TTL=63 ID=54420 DF PROTO=TCP SPT=1022 DPT=40118 SEQ=3719141646 ACK=0
WINDOW=5840 SYN URGP=0

Nov 13 11:28:12 malcolmx Shorewall:all2all:REJECT: IN=eth1 OUT=eth0
MAC=aa.bb.cc.dd.ee SRC=192.x.y.z DST=192.p.q.r LEN=60 TOS=00 PREC=0x00
TTL=63 ID=22359 DF PROTO=TCP SPT=1022 DPT=40118 SEQ=492158226 ACK=0
WINDOW=5840 SYN URGP=0

This happens regardless of whether applications have been started 
(e.g. browser, email, etc) or not.

Can any user on this list suggest a means of discovering which process
is responsible for these SYN packets? This is an area with which
I am unfamiliar and any help would be appreciated.

Respect to the UbuntuLinux team for good work.

Regards,
Shango Oluwa.





More information about the ubuntu-users mailing list