|
Hello,
On Wed, 8 Aug 2001, Hayden Myers wrote:
> 16:01:57.282867 eth0 < 192.168.12.1 > 192.168.12.3: icmp: 154.15.36.144
> tcp port 1064 unreachable [tos 0xc0]
> 16:01:57.526536 eth0 < 154.14.36.18 > 192.168.12.3: icmp: host
> 154.15.36.144 unreachable
Are you sure? These messages do not look like the previous ones.
There is no "port www unreachable". We search for such messages only.
> It does in deed look to be coming from the real server.
This is another communication. I see that each traffic goes
through eth0 but can you start two tcpdumps (for the director->client
and real server->director traffics) if your tcpdump does not listen
to all devices at the same time. So, for now I'm not sure who generates
the replies.
> Hayden Myers
Regards
--
Julian Anastasov <ja@xxxxxx>
|
