This is Mikrotik's broadcast-based L2 neighbor discovery protocol:
http://wiki.mikrotik.com/wiki/Manual:IP/Neighbor_discovery
On 05 Jun 2015, at 11:33 PM, jerome schatten <romers(a)shaw.ca> wrote:
(Please trim inclusions from previous messages)
_______________________________________________
So on my jnos machine, every minute without fail, I see the following broadcast on tun0:
Fri Jun 5 14:22:01 2015 - tun0 recv:
IP: len 168 81.174.253.193->192.168.1.149 ihl 20 ttl 243 tos 160 prot IP
IP: len 148 44.131.160.1->255.255.255.255 ihl 20 ttl 64 DF prot UDP
UDP: len 128 5678->5678 Data 120
0000 ..<.....teqgate01....6.27....MikroTik....."".....ILXI-T3GZ....RB
0040 1200......................Ug.....ipip-ampr-24.85.103.226
Fri Jun 5 14:22:01 2015 - tun0 recv:
IP: len 168 81.174.253.193->192.168.1.149 ihl 20 ttl 243 tos 160 prot IP
IP: len 148 44.131.160.1->255.255.255.255 ihl 20 ttl 64 DF prot UDP
UDP: len 128 5678->5678 Data 120
0000 ..<.....teqgate01....6.27....MikroTik....."".....ILXI-T3GZ....RB
0040 1200......................Ug.....ipip-ampr-24.85.103.226
(encap) 44.131.160.1->255.255.255.255 DF UDP
0000 ..<.....teqgate01....6.27....MikroTik....."".....ILXI-T3GZ....RB
0040 1200......................Ug.....ipip-ampr-24.85.103.226
Fri Jun 5 14:22:01 2015 - tun0 sent:
IP: len 148 44.131.160.1->255.255.255.255 ihl 20 ttl 63 DF prot UDP
UDP: len 128 5678->5678 Data 120
0000 ..<.....teqgate01....6.27....MikroTik....."".....ILXI-T3GZ....RB
0040 1200......................Ug.....ipip-ampr-24.85.103.226
Why is this happening? Anyone else seeing this stuff?
Best,
jerome - ve7ass
Vancouver