topic Re: tcpdump message in Operating System - HP-UX

tcpdump message

KPS — Mon, 15 Dec 2003 12:21:49 GMT

We're having problems with our Scheduler Application between a number of different servers. The only issues are between our main Apps Server and clients that are located in a different DMZ behind a different firewall. We decided to run tcpdump from the server that the communication is originating from. We see one particular message that we can't identify what it is saying. It as follows:

(DF)

Does this have any useful meaning to try to diagnose our issues??

Thanks,
-Ken

Re: tcpdump message

Massimo Bianchi — Mon, 15 Dec 2003 12:23:49 GMT

Maybe you have a virus:

http://archives.neohapsis.com/archives/incidents/2002-04/0019.html

(found with google)

Massimo

Re: tcpdump message

Massimo Bianchi — Mon, 15 Dec 2003 12:25:20 GMT

Or maybe the virus is windows itself :)

http://archives.neohapsis.com/archives/incidents/2002-04/0024.html

Massimo

(sorry, i saw the second article afterwards..)

Re: tcpdump message

KPS — Mon, 15 Dec 2003 12:29:43 GMT

I'm not sure that Virus would apply here since we have HP-UX and Solaris 9 environemnts that we're talking about here in this case. That Virus appears to be Windows related??

Re: tcpdump message

Massimo Bianchi — Mon, 15 Dec 2003 12:37:12 GMT

Check out if there is any window server on the same network where you traced the packets..

Massimo

Re: tcpdump message

KPS — Mon, 15 Dec 2003 12:40:17 GMT

We'll do ....

Re: tcpdump message

Paula J Frazer-Campbell — Mon, 15 Dec 2003 13:05:07 GMT

Ken

Check this out:-

http://www.giac.org/practical/Ken_McKinlay.html

Paula