+ Post New Thread
Page 2 of 2 FirstFirst 12
Results 16 to 23 of 23
Internet Related/Filtering/Firewall Thread, keep getting loads of packets addressed to127.0.0.1 in Technical; Originally Posted by mhchs just done my first capture but cant make head nor tail of it i have attached ...
  1. #16

    m25man's Avatar
    Join Date
    Oct 2005
    Location
    Romford, Essex
    Posts
    1,682
    Thank Post
    49
    Thanked 484 Times in 351 Posts
    Rep Power
    144
    Quote Originally Posted by mhchs View Post
    just done my first capture but cant make head nor tail of it i have attached the file can any one make sense of this??
    I couldn't read it, what did you save it as?

  2. #17

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    10,053
    Thank Post
    3,583
    Thanked 1,123 Times in 1,025 Posts
    Rep Power
    377
    prolly a daft thought so appologies in advance to the OP and everyone else

    You haven't setup or configured a web server anywhere have you ie IIS or apache ??

    That or a duff / dead network card ??

  3. #18

    mattx's Avatar
    Join Date
    Jan 2007
    Posts
    9,249
    Thank Post
    1,061
    Thanked 1,070 Times in 626 Posts
    Rep Power
    741
    Just had a quick look..... Lots of ARP requests......
    Also frame 178 has me a little confused. Is that a switch looking for 127.0.0.1 ? As it's pointing to another switch which states it's the same address ? It's as if they are fighting it out between themselves.
    Also Sophos is looking for something on a different subnet !!
    Last edited by mattx; 4th March 2010 at 07:20 PM.

  4. #19

    Join Date
    Mar 2010
    Posts
    19
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    i have several iis servers running different web apps. i also have got vmware

  5. #20

    mattx's Avatar
    Join Date
    Jan 2007
    Posts
    9,249
    Thank Post
    1,061
    Thanked 1,070 Times in 626 Posts
    Rep Power
    741
    Need someone else to back me up but I would look at the configs of the two switches - Netgear ? [ if they are switches ] of frames 178 & 160 - [ the mac addresses are in the capture file ]
    Last edited by mattx; 4th March 2010 at 07:30 PM.

  6. #21

    Join Date
    Mar 2010
    Posts
    19
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    hi i missed that when i looked at it the first time round. nice one i have looked at it again and tracked the device it is a WAP. i went and killed the wap and the switch that its connected to i then run a second scan [ the one attached] i then checked through the logs and noticed it appearing on the next wap in the area and the one next to that and the one next to that...and theone next to that!

    they are on frames 96,99,126,137

    do you think i may have a rogue wireless device or outside device???
    Attached Files Attached Files

  7. #22

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,821
    Thank Post
    272
    Thanked 1,140 Times in 1,036 Posts
    Rep Power
    351
    do you wap have a controller? or are they unmanaged?

    Edit: what has the addresses that 127.0.0.1 is trying to look up?

    for the second round its
    10.11.71.103
    10.11.71.116
    10.11.71.107
    10.11.71.114
    Last edited by glennda; 4th March 2010 at 08:43 PM.

  8. #23

    Join Date
    Mar 2010
    Posts
    19
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Hi thanks for all the replies i have sorted this out now. it seems that aload of the waps have reset and the firm ware has been trashed so im now in the process of redoing all of them.



SHARE:
+ Post New Thread
Page 2 of 2 FirstFirst 12

Similar Threads

  1. [Video] Video about packets...
    By mossj in forum Jokes/Interweb Things
    Replies: 4
    Last Post: 6th February 2010, 12:19 AM
  2. Loads a Work
    By Simcfc73 in forum General Chat
    Replies: 2
    Last Post: 22nd January 2010, 11:19 PM
  3. embc webserver issues addressed
    By sparkeh in forum East Midlands Broadband Consortium (EMBC)
    Replies: 7
    Last Post: 12th January 2010, 10:19 AM
  4. [CLOSED] Improvement: Ad Block Splash before Ad Loads
    By kmount in forum EduGeek.net Site Problems
    Replies: 4
    Last Post: 5th September 2008, 01:42 PM
  5. SMB Packets
    By AJT1 in forum Wireless Networks
    Replies: 6
    Last Post: 12th February 2008, 01:56 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •