Re: SNMP Weirdness

From: Christian Vogel (chris@obelix.hedonism.cx)
Date: 01/23/03

  • Next message: mistymountainhop@hushmail.com: "Paypal.com hosting IRC server, possible hack?" 
    From: Christian Vogel <chris@obelix.hedonism.cx>
Date: Thu, 23 Jan 2003 18:36:57 +0100
To: Keith Pachulski <keithp@corp.ptd.net>

    Hi,

    > I have a few internal machines sending the same queries to the same address.

    192.0.0.192 is the default address of HP "JetDirect" printerservers,
    so this most likely is some windows-PC trying to discover the printservers
    on the connected LAN.

            Chris 

    -- 
[KMR] The earth consists primarily of protons, electrons, neutrons, and morons.
----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com