Am Die, 2003-02-25 um 23.14 schrieb Cliff Kent: > Thanks Ralf, > >> Maybe it is just the receiver? << > > Perhaps, but I've never built a linux IGMP "receiver" before either. You do not have to build one. Maybe the provider just forwards these packets to your client and you are the first to notice? Does your client use a fixed or a dynamic IP? How long is the fixed IP in place? > > >> Can you post a tcpdump -X proto 2 << > > Yes, the box is still in service but it's near by. I'll stop there when > I can. I'll post results as soon as I have them. That would clear part of it, I guess, Cheers, Ralf -- Ralf Spenneberg RHCE, RHCX IPsec/PPTP Kernels for Red Hat Linux: http://www.spenneberg.com/.net/.org/.de Honeynet Project Mirror: http://honeynet.spenneberg.org Snort Mirror: http://snort.spenneberg.org -- Psyche-list mailing list Psyche-list@redhat.com https://listman.redhat.com/mailman/listinfo/psyche-list