Ben Luey wrote: > > I have pppd installed on our server to dial on demant for windows 95 > clients. Recently, I've noticed that the link is never going down and even > when all the computers are off, pppd stays active. I ran trafshow and I > keep seeing this line: > > unkn 192.168.254.1 224.0.0.13 30 > unkn 192.168.254.1* PIM-ROUTERS.MCAST.N 60 > > Going down the ppp0 line. What is this? Our ISP recently made some server > changes -- is this related. What is ths PIM-Routers.mcast.net server at > 244.0.0.13? Why is the protocol unknown? I tried rejecting the > conenctions with ipchains, but it doesn't work, I think because the > protocol is unknown. Does trafshow have an option to do numeric output only (like `route -n'?) If you can find the protocol number, you can drop things that way. Also, if you don't use any multicast apps, you can probably just block the whole 224.0.0.0/8 network. Do you have any strange daemons running that shouldn't be? I suppose the first thing that comes to mind is mrouted, the multicast routing daemon. -- _ _ _ _ _ ___ _ _ _ ___ _ _ __ Suicidal twin kills / \/ \(_)| ' // ._\ / - \(_)/ ./| ' /(__ sister by mistake! \_||_/|_||_|_\\___/ \_-_/|_|\__\|_|_\ __) [ Mike Hicks | http://umn.edu/~hick0088/ | mailto:hick0088 at tc.umn.edu ]