Lot of UDP traffic shown by iptraf. Does it mean problem?

Andy Green andy at warmcat.com
Tue Sep 5 14:06:54 UTC 2006


Vijay Gill wrote:
> Hi,
> 
> I am running FC5 connected to NTL (Ireland) cable modem. I have
> iptables firewall setup. Whenever I run iptraf it shows a lot of
> activity on my eth0 (the NIC connected to cable modem).  Does it mean
> there is some trouble? I will go home in the evening and grab some
> more information (say tcp dump) and post it if needed.
> 
> In the mean while can somebody tell me something about this by just
> their own experience?

Can just be iptraf doing DNS lookups of stuff flying by.

Incidentally this is a good way to realize if someone who doesn't 
realize they should turn off DNS lookups is running tcpdump or another 
sniffer against you locally... but in this case it is you running the 
sniffer and creating the noise, so no worries :-)

-Andy
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4492 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20060905/508eb584/attachment-0001.bin>


More information about the fedora-list mailing list