[plug] strange network activity?

[Rob Dunne]

William Kenworthy wrote:
 > you dont say what operating systems each has.

192.168.1.100 is ubuntu

192.168.1.102 is debian -- a linkstation NAS hacked via FreeLink. 
http://nas-central.org/index.php/FreeLink_for_the_Linkstation_Pro
it doesnt support a monitor and there is no X-server installed on it.
This is the one with the network activity.

 > Try iftop, iptraf, wireshark and etherape

iftop and  iptraf only show active connection to 192.168.1.100 and the
modem.

iftop
192.168.1.100 <->  192.168.1.102
192.168.1.102 <->  iConnectAccess621

iptraf
UDP (74 bytes) from 192.168.1.254:53 to 192.168.1.102:1558 on eth0
UDP (72 bytes) from 192.168.1.102:1563 to 192.168.1.254:53 on eth0

 >
 > You have a few networks showing - perhaps a quick sketch of the
 > network(s) layout may help to see whats happening (do the others
 > exist?).

there is just 192.168.1.100 and 192.168.1.102 connected to a hub and 
then a modem -- none of the other machines (192.168.176.230 etc) exist.

Also iptraf  shows the incoming rates
are the same as the outgoing rates -- is traffic just being routed 
through 192.168.1.102 and  jnettop is just confused about all the other
IP addresses?

Bye
Rob