moze li neko da mi objasni sta ovo znaci..izvukao sam samo mali deo…..i trenutno mi je nakacen samo jedan Mac na internet….da li nesto pokusava da se nakaci,ne primecujem na Little Snitch-u..bilo kakvu aktivnost….ili je papaparanoja:)
e da iskljucen je wifi trenutno…
09/12/2012 12:33:59 DHCP Client: [ATM2]Send Discover
09/12/2012 12:33:05 **IP Spoofing** 192.168.1.100, 138->> 192.168.1.255, 138 (from ATM1 Inbound)
09/12/2012 12:33:00 DHCP Client: [ATM2]Could not find DHCP daemon to get information
09/12/2012 12:32:55 DHCP Client: [ATM2]Send Discover
09/12/2012 12:31:56 DHCP Client: [ATM2]Could not find DHCP daemon to get information
09/12/2012 12:31:51 DHCP Client: [ATM2]Send Discover
09/12/2012 12:30:52 DHCP Client: [ATM2]Could not find DHCP daemon to get information
09/12/2012 12:30:47 DHCP Client: [ATM2]Send Discover
09/12/2012 12:30:44 **IP Spoofing** 192.168.1.101, 138->> 192.168.1.255, 138 (from ATM1 Inbound)
09/12/2012 12:29:50 192.168.1.2 login success
09/12/2012 12:29:48 DHCP Client: [ATM2]Could not find DHCP daemon to get information
09/12/2012 12:29:43 DHCP Client: [ATM2]Send Discover
09/12/2012 12:29:30 192.168.1.2 logout    
09/12/2012 12:28:44 DHCP Client: [ATM2]Could not find DHCP daemon to get information
09/12/2012 12:28:39 DHCP Client: [ATM2]Send Discover

Šta ti je još nakačeno na lokalnu mrežu? AppleTV, iPhone, nešto treće? Nema veze koliko njih ide na internet, DHCP se deli svim uređajima u lokalnoj mreži.

Imam nakacen MacPro..AppleTV..GoogleTV…AzBox Sat Risiver…..IPTV(ali je on verovatno druga prica)...Wifi sam trenutno iskljucio….pa se ne kacim sa Mobilnim…i laptopom….
sacu da iskljucim sve sem Mac-a…pa saljem Log…

ovo je log,samo je Macpro na net-u..sve sam pogasio…
09/12/2012 17:15:44 DHCP Client: [ATM2]Could not find DHCP daemon to get information
09/12/2012 17:15:39 DHCP Client: [ATM2]Send Discover
09/12/2012 17:15:32 **Smurf** 192.168.1.2->> 192.168.1.0, Type:8, Code:0 (from LAN1 Inbound)
09/12/2012 17:15:19 **Smurf** 192.168.1.2->> 192.168.1.0, Type:8, Code:0 (from LAN1 Inbound)
09/12/2012 17:14:41 **Smurf** 192.168.1.2->> 192.168.1.0, Type:8, Code:0 (from LAN1 Inbound)
09/12/2012 17:14:40 DHCP Client: [ATM2]Could not find DHCP daemon to get information
09/12/2012 17:14:35 DHCP Client: [ATM2]Send Discover
09/12/2012 17:14:22 **IP Spoofing** 192.168.1.2, 137->> 192.168.1.255, 137 (from ATM1 Inbound)
09/12/2012 17:14:21 **IP Spoofing** 192.168.1.2, 137->> 192.168.1.255, 137 (from ATM1 Inbound)
09/12/2012 17:13:53 **Smurf** 192.168.1.2->> 192.168.1.0, Type:8, Code:0 (from LAN1 Inbound)
09/12/2012 17:13:36 DHCP Client: [ATM2]Could not find DHCP daemon to get information
09/12/2012 17:13:31 DHCP Client: [ATM2]Send Discover
09/12/2012 17:12:32 DHCP Client: [ATM2]Could not find DHCP daemon to get information
09/12/2012 17:12:27 DHCP Client: [ATM2]Send Discover
09/12/2012 17:12:20 If(PPPoE1) receive PADT  
09/12/2012 17:11:28 DHCP Client: [ATM2]Could not find DHCP daemon to get information
09/12/2012 17:11:23 DHCP Client: [ATM2]Send Discover
09/12/2012 17:10:24 DHCP Client: [ATM2]Could not find DHCP daemon to get information
09/12/2012 17:10:19 DHCP Client: [ATM2]Send Discover
09/12/2012 17:09:20 DHCP Client: [ATM2]Could not find DHCP daemon to get information
09/12/2012 17:09:15 DHCP Client: [ATM2]Send Discover
09/12/2012 17:08:16 DHCP Client: [ATM2]Could not find DHCP daemon to get information
09/12/2012 17:08:11 DHCP Client: [ATM2]Send Discover
09/12/2012 17:07:46 **IP Spoofing** 192.168.1.2, 138->> 192.168.1.255, 138 (from ATM1 Inbound)

Onda nešto od toga pokušava da dobije IP adresu od DHCP servera i izgleda ne uspeva. Ono spoofing je od nekog uređaja koji koristi NetBIOS (PC?)jer ide preko porta 138:

http://technet.microsoft.com/en-us/library/cc959833.asp

Xhttp://www.speedguide.net/port.php?port=138

Proveri koju adresu ima MacPro u System Preferences->Network (verovatno je on 198.162.1.2). I verovatno ima uključen Windows file sharing (Sambu).

Nego, da nije ovo ATM1 i ATM2 vezano za fizičke portove na LAN-u? Koliko ima taj tvoj ruter LAN portova?

MacPro jeste 192.168.1.2….i jeste ukljucen File Sharing,Samba…Plex media server…
a moj router,ima 4 Lan porta….ali jedan koristi IPTV….ostali su mi za lokalnu mrezu….
na Wifi sam ukljucio davno WPA/WPA2…....
na MacPro imam dva lan porta…zabo sam u port 1,mada to verovatno nije bitno….
buni me ovaj IP 192.168.1.101????

Post edited by: amsterdamxxx, at: 2012/09/12 17:20

i ovo sam radio..
Port Scanning host: 192.168.1.2

Open TCP Port: 21 ftp
Open TCP Port: 88 kerberos
Open TCP Port: 139 netbios-ssn
Open TCP Port: 445 microsoft-ds
Open TCP Port: 548 afpovertcp
Open TCP Port: 5204
Open TCP Port: 32400
Open TCP Port: 49169
Open TCP Port: 64214
Port Scan has completed…

Meni lič da je to i bio MacPro pre nego što si gasio ruter ili tako nešto, pa je posle dobio IP adresu 192.168.1.2. A šta ti je FIZIČKI ubodeno u port 2?

nista….

u jednom malopredjasnejm logu sam primetio i ovo da pise..
SYN flood…pa….Ip…...
el to neko izgleda oce da mi se nakaci,ili sta vec….
kolko znam,to sve ima veze sa Routerom,ne sa Mac-om….i da li menja stvar da iskljucim Wifi,na routeru…???

Ako ti se kač, onda jeveć provalio lozinku za wireless, tako da sumnjam. Naime, da bi uopšte mogao da zatraži adresu od DHCP servera, mora već fizički da bude na mreži.

ok,znaci,ako mi je wifi iskljucen….on bi teoretski trebao kablom da bude povezan sa mojim modemom,nikako drugacije….sto je naravno,Neizvodljvo:)......

Upravo tako.