nv-l
[Top] [All Lists]

RE: [nv-l] NetView Multicast

To: "'nv-l@lists.us.ibm.com'" <nv-l@lists.us.ibm.com>
Subject: RE: [nv-l] NetView Multicast
From: "Bursik, Scott {PBSG}" <Scott.Bursik@pbsg.com>
Date: Fri, 12 Dec 2003 08:23:16 -0600
Delivery-date: Fri, 12 Dec 2003 14:35:20 +0000
Envelope-to: nv-l-archive@lists.skills-1st.co.uk
Reply-to: nv-l@lists.us.ibm.com
Sender: owner-nv-l@lists.us.ibm.com
The sending device is an AIX 5.2 box.

Scott Bursik
PepsiCo Business Solutions Group
Enterprise Systems Management

-----Original Message-----
From: Paul [mailto:pstroud@bellsouth.net] 
Sent: Thursday, December 11, 2003 4:47 PM
To: nv-l@lists.us.ibm.com
Subject: Re: [nv-l] NetView Multicast

Scott,
Do you know what device is sending this? ie does the source
address match a machine, what is the OS/Router?

Paul

Bursik, Scott {PBSG} wrote:
> In an effort to troubleshoot Authentication Trap Failure errors I have
> started sniffing one of the machines that is sending these events. I
noticed
> a LOT of traps coming in at one time on my NetView box from that machine
and
> the below sample is the cause of the Auth. Failure traps. I searched the
> archives and see one thread talking about this condition but there was no
> resolution and the address showing in packet is the same as that thread.
> 
> Here is the thread I read:
> 
> http://lists.skills-1st.co.uk/mharc/html/nv-l/1999-08/msg00259.html
> 
> Any ideas?
> 
> 
> ====( 183 bytes received on interface en0 )==== 12:50:21.634682865
> ETHERNET packet : [ 00:02:55:76:27:d6 -> 01:00:5e:00:00:01 ]  type 800
(IP)
> IP header breakdown:
>       < SRC =   156.81.227.16 >  (pbsxsn00001.fritolay.pvt)
>       < DST =       224.0.0.1 >  (ALL-SYSTEMS.MCAST.NET)
>       ip_v=4, ip_hl=20, ip_tos=0, ip_len=169, ip_id=24043, ip_off=0
>       ip_ttl=1, ip_sum=fbf5, ip_p = 17 (UDP)
> UDP header breakdown:
>       <source port=39803, <destination port=161(snmp) >
>       [ udp length = 149 | udp checksum = 4612 ]
> 00000000     30818a02 01000406 7075626c 6963a17d     |0.......public.}|
> 00000010     020373a7 38020100 02010030 70300e06     |..s.8......0p0..|
> 00000020     0a2b0601 02010202 01010105 00300e06     |.+...........0..|
> 00000030     0a2b0601 02010202 01060105 00300e06     |.+...........0..|
> 00000040     0a2b0601 02010202 01030105 00300e06     |.+...........0..|
> 00000050     0a2b0601 02010202 01020105 00300e06     |.+...........0..|
> 00000060     0a2b0601 02010202 01070105 00300e06     |.+...........0..|
> 00000070     0a2b0601 02010202 01080105 00300e06     |.+...........0..|
> 00000080     0a2b0601 02010202 01050105 00           |.+...........   |
> 
> 
> Thanks,
> 
> Scott Bursik
> PepsiCo
> 

<Prev in Thread] Current Thread [Next in Thread>

Archive operated by Skills 1st Ltd

See also: The NetView Web