Netgate Store

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Messages - Charlie22911

Pages: [1]
General Questions / Re: localhost resolving to strange address
« on: February 06, 2018, 05:02:21 pm »
I'm a bit new to this, so let me give this a shot... Please let me know if there are more specific items I need to list.

I'm using 2.4.2-RELEASE-p1, DNS resolver with forwarding enabled to Google DNS ipv4 and ipv6 with interfaces set to its default of ALL.

Physical setup is a Qotom fanless box with i3 4025u + 4GB ram and quad intel i210 nics as follows: Cable modem > pfSense WAN >|> pfSense LAN+SPAN > Netgear GS108T managed switch (LAN) + Monitoring PC (SPAN) which is separate from my main PC.

Packages installed are Snort, pfBlockerNg, ntopng, nut, openvpn-client-export.

I tried powering off my main PC to see what how the traffic changes, and now correctly resolves to the hostname of the device that performed the resolution; the target MAC address is still the same however. Originally was resolving to regardless of the device performing the resolution.

General Questions / Re: localhost resolving to strange address
« on: February 06, 2018, 04:16:19 pm »
Doing a port span on LAN interface to monitor, only traffic being passed is between my main PC on random high ports (55000 and up) and TCP ports 443 and 19000. Sitting at 31GB of traffic over a 12ish hour period with a TCP checksum error count of over 24 million between this address only.

The MAC address associated with this is 00:0E:C4:D2:7F:7F which doesn't match any known device on my network and seems to be associated with the company Iskra Transmission D.d.

I still can't figure this out, it'd driving me batty... No ideas folks?

General Questions / localhost resolving to strange address
« on: February 05, 2018, 04:46:00 pm »
So I've got something weird going on that I noticed while monitoring network traffic. localhost ipv4 and ipv6 are resolving to and I am not sure why.
Is this something to be concerned about? Strangely, even if I use MXToolBox to do a DNS lookup it also resolves to localhost...

Pages: [1]