Re: [44net] [nos-bbs] strange udp broadcasts...

I have those packets, too. These ports are used by MikroTik Neighbor Discovery Protocol (MNDP) http://www.mikrotik.com/documentation/manual_2.7/IP/MNDP.html The operator of 209.189.196.68 probably enabled it on all interfaces, including ampr tunnels. AFAIK the source of the RIP broadcasts should be 169.228.66.251 (just checked it now). Marius, YO2LOJ -----Original Message----- From: 44net-bounces+marius=yo2loj.ro(a)hamradio.ucsd.edu [mailto:44net-bounces+marius=yo2loj.ro@hamradio.ucsd.edu] On Behalf Of Don Moore Sent: Thursday, January 30, 2014 14:10 To: TAPR xNOS Mailing List; AMPRNet working group Subject: Re: [44net] [nos-bbs] strange udp broadcasts... (Please trim inclusions from previous messages) _______________________________________________ I too am getting this and have been for a few weeks now but initiated by a different address... 07:04:00.406011 IP 209.189.196.68 > 192.168.1.150: IP 0.0.0.0.5678 > 255.255.255.255.5678: UDP, length 119 (ipip-proto-4) 07:05:00.408246 IP 209.189.196.68 > 192.168.1.150: IP 0.0.0.0.5678 > 255.255.255.255.5678: UDP, length 119 (ipip-proto-4) 73, Don On Thu, Jan 30, 2014 at 12:49 AM, Jerome Schatten <romers(a)shaw.ca> wrote: