[ale] More info on Lan Browser in Konqueror showing machine names not on LAN

[John Wells]

I can't swear to this, but I'll take a look tonight when I get home. 
Sometime back, I started seeing these hostNNN-null.null entries on the tcp
dumps on my home lan.  Did a little exploring, and iirc each box (approx.
6) on my NAT'd, internal lan resolved to these values, each with a
different number after the host.  My DNS servers are hardcoded in
/etc/resolv.conf to use Bellsouth's DNS.

You might try switch /etc/nsswitch.conf to resolve to your hosts file
before trying to query DNS.  That might get rid of these.

Kinda interesting, as I'm assuming these hostNNN names are being returned
from Hellsouth's DNS servers, but I would think with NAT that to the
servers, all queries should look like they're coming from the same host.

Don't know what they're doing on their end or if it's something I'm doing
on my end that would cause this, but just an fyi.  If you run tcpdump on
your router and then try pinging from different machines on your internal
lan, you should see your outgoing packets identified by different hostNNN
numbers.

John

 Neal Wilkinson said:
> I hadn't tried a netstat before but it looks like it might be
> bellsouth's mail servers, freedb.org (not sure why that would have a
> connection) and aol from Gaim I would bet was the host103.
>
> tcp        0      0 host104-null.null:34444 imv10.mail.bellsou:smtp
> TIME_WAIT
> tcp        0      0 host104-null.null:34446
>
> tcp        0      0 host104-null.null:34442 freedb.org:8880
> ESTABLISHED
> tcp        0      0 host104-null.null:34448 imv13.mail.bellsou:pop3
> TIME_WAIT
> tcp        0      0 host104-null.null:34447 imv09.mail.bellsou:pop3
> TIME_WAIT
> tcp        0      0 host104-null.null:34445 imv16.mail.bellsou:pop3
> TIME_WAIT
>
>
>
>
> On Wed, 2003-01-29 at 08:46, Geoffrey wrote:
>> I saw something like this yesterday when helping someone else.  I
>> thought that the null.null... entry was likely her router.  I'm
>> wondering now if you're not seeing something outside of your house?
>> Of  course this would be a huge security error on Bellsouth's effort.
>>
>> I understand that this is common on cable networks. ???
>>
>> Neal Wilkinson wrote:
>> > I've noticed three machines listed in the LAN Browser in Konqueror
>> that were not there yesterday. There really shouldn't be anything
>> there. I have another Linux machine in my home but I haven't yet set
>> them up to talk to each other as of yet. I have a shared printer on
>> the other machine using cups. The machine names listed are something
>> you might see if you didn't have a machine name specified and they
>> were getting their names from the router. Both machines have
>> specified host names. The names listed in the LAN Browser are
>> "host100-null.null.bellsouth.net" there is also a host103 and host1.
>> What could be generating this? I do have Lisa running on both
>> machines if this helps. Thanks for your assistance and I apologize
>> it is something simple and I have missed it. I have looked for an
>> answer.
>> >
>> > Neal
>> >
>> >
>> >
>> > _______________________________________________
>> > Ale mailing list
>> > Ale at ale.org
>> > http://www.ale.org/mailman/listinfo/ale
>> >
>> >
>>
>> --
>> Until later: Geoffrey		esoteric at 3times25.net
>>
>> The latest, most widespread virus?  Microsoft end user agreement.
>> Think about it...
>>
>> _______________________________________________
>> Ale mailing list
>> Ale at ale.org
>> http://www.ale.org/mailman/listinfo/ale
>
>
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale



_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale