to block udp broadcast

[akarayil]

Hi friends,
Using a network sniffer, I found that my hp server rx4640 sends a lot of broadcasts from a udp port no.53948 to a port 7500.
How can I monitor and block this broadcast from the server side?

[Laurent Menase]

1st you can try to identify the destination process with lsof
you can use ipfilter to avoid to receive them

If you want to sniff the messages:
nettl -tn all -e NS_LS_UDP -f /tmp/result

then take /tmp/result.TRC000 and look at it with wireshark on your PC.

[Laurent Menase]

1st you can try to identify the destination process with lsof
you can use ipfilter to avoid to receive them

If you want to sniff the messages:
nettl -tn all -e NS_LS_UDP -f /tmp/result

then take /tmp/result.TRC000 and look at it with wireshark on your PC.

"nettl -tf -e all " will stop the tracing

[akarayil]

I downloaded and installed lsof.
See the output of lsof command
# /usr/local/bin/lsof -i :53948
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
rvd 5030 user10 124u IPv4 0xe0000001946ed5c0 0t0 UDP *:53948 (Idle)

But this process can't be stopped. How can I stop broadcasting without stopping this command?

[Laurent Menase]

Never seen rvd.
try to find out where is that rvd.
then do a what on that rvd,
strings -a rvd, and try to find vendor/product indications,