Hosting Provided By

Re: SNMP Weirdness

From: Christian Vogel <chris(at)obelix.hedonism.cx>
Date: Thu Jan 23 2003 - 12:36:57 EST

Hi,

> I have a few internal machines sending the same queries to the same address.

192.0.0.192 is the default address of HP "JetDirect" printerservers, so this most likely is some windows-PC trying to discover the printservers on the connected LAN.

Chris

-- 
[KMR] The earth consists primarily of protons, electrons, neutrons, and morons.

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: 
http://aris.securityfocus.com

Received on Sat Jan 25 10:48:27 2003

This message: [ Message body ]
Next message: mistymountainhop(at)hushmail.com: "Paypal.com hosting IRC server, possible hack?"
Previous message: Scott C. Kennedy: "Is anyone else seeing a real heavy incrase in TCP/1434?"
In reply to: Keith Pachulski: "SNMP Weirdness"
Next in thread: Carlo Ottaviani: "Re: SNMP Weirdness"
Reply: Carlo Ottaviani: "Re: SNMP Weirdness"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:01:56 EDT