network packets to port 40118
Shango Oluwa
shango at mewe.org.uk
Sat Nov 13 16:39:41 UTC 2004
Greetings the List,
UbuntuLinux is a great advance in the OS sector and our organisation,
MeWe is supporting this project's development.
Installing across several laptops & workstations (some of them PII 266)
was a relaxed process with a few minor obstacles that my team & I
solved easily. However, an internal router is showing intermittent
packets (approx. every 17 mins.) coming from UbuntuLinux machines
and destined for an upstream server's port 40118.
Examples:
Nov 13 11:11:00 malcolmx Shorewall:all2all:REJECT: IN=eth1 OUT=eth0
MAC=aa.bb.cc.dd.ee SRC=192.x.y.z DST=192.p.q.r LEN=60 TOS=00 PREC=0x00
TTL=63 ID=54420 DF PROTO=TCP SPT=1022 DPT=40118 SEQ=3719141646 ACK=0
WINDOW=5840 SYN URGP=0
Nov 13 11:28:12 malcolmx Shorewall:all2all:REJECT: IN=eth1 OUT=eth0
MAC=aa.bb.cc.dd.ee SRC=192.x.y.z DST=192.p.q.r LEN=60 TOS=00 PREC=0x00
TTL=63 ID=22359 DF PROTO=TCP SPT=1022 DPT=40118 SEQ=492158226 ACK=0
WINDOW=5840 SYN URGP=0
This happens regardless of whether applications have been started
(e.g. browser, email, etc) or not.
Can any user on this list suggest a means of discovering which process
is responsible for these SYN packets? This is an area with which
I am unfamiliar and any help would be appreciated.
Respect to the UbuntuLinux team for good work.
Regards,
Shango Oluwa.
More information about the ubuntu-users
mailing list