[geeks] What would cause this

[Joshua D Boyd]

On Thu, Feb 14, 2002 at 10:36:35AM -0500, Andrew Weiss wrote:
> I am looking for a no fuss way to stop my machines on my home LAN from
> smacking the gateway and bringing up a link.  Right now I am using ICS
> from Win2K.  The Mac only brings up a link during the boot of OS X (no it
> isn't NTP... it's probably a Netinfo broadcast of some sort), but
> otherwise the Mac and PC behave.  I have just added a Quadra 840AV running
> Debian 2.2r3 and a Sparc LX running Sol 7.  I have isolated most of the
> spurious dial requests to the 10baseT portion of the network containing
> the two last machines.  I tried shutting off sendmail on the Sparc... no
> dice... still getting dials.  I shut down the Quadra... no dials.... so I
> know the Quadra is doing it.  I removed apache and also samba from the
> Quadra in the hopes it would just sit there idle... it still wants to
> connect every once in a while... any other things I should look for.  Yes
> I know ideally I should have an older Cisco and define interesting
> traffic, but I'm sort of unemployed.

You could set up tcpdump on another machine to monitor what messages from the
840av are causing the connect to start.  That is what I would do.  If you leave
the 840av idle, and filter for messages from that machine only, the analysis
shouldn't be too difficult.

-- 
Joshua D. Boyd