[Dshield] incoming traffic from 192.168.0.1 ????

Stephan Odak Win2k at home.com
Thu Jul 26 22:40:19 GMT 2001


My hunch is that the 192.168.0.1 machine is the same as the 169.254.61.126
machine. A machine with 2 or more IP addresses and more than one route to
the Internet. Windows will send packets to both routes and accept the one
that arrives first.

Stephan
GCIA#0241


 -----Original Message Excerpt-----
From: 	dshield-admin at dshield.org [mailto:dshield-admin at dshield.org]  On
Behalf Of Coxe, John B.
Sent:	Thursday, July 26, 2001 3:41 PM
To:	'dshield at dshield.org'
Subject:	RE: [Dshield] incoming traffic from 192.168.0.1 ????
> > 11:27:19 (remaining entries)
> >
> > 169.254.61.126
> > 137                            137
> > 192.168.0.1
> > 137                            137
> > adsl-64-160-96-149.dsl.bkfd14.pacbell.net
> > 137                            137
> > 192.168.0.1
> > 137                            137
> > 169.254.61.126
> > 137                            137
> >
> > My apologies if there is some other formal way of raising this
> > issue, but the fact that it's an internal looking address has me
> > concerned. I'm aware of the
net-bios
> > issue with windows
> > machines and I've cloaked my router. One last note is that
> > 192.168.0.1 is neither my router's ip nor an ip of a machine on my
> > LAN.
> >
> > Any insight would be greatly appreciated! Right now I've got my LAN
down
> > and I
> > am afraid to bring it up until I know what's going on :-/
> >
> >
> > Marty
> >
> > _______________________________________________





More information about the list mailing list