Page 2 of 4 FirstFirst 1234 LastLast
Results 11 to 20 of 35

Thread: 0.0.0.0 traffic

  1. #11
    Master Untangler Sam Graf's Avatar
    Join Date
    Feb 2016
    Location
    Michigan
    Posts
    887

    Default

    I added Bandwidth Control so I could take a look at the report. I currently have only hostnames in the report, no reference at all to the Untangle device itself.

    So I take it that you haven't recently enabled logging of local inbound and/or outbound sessions?

  2. #12
    Master Untangler
    Join Date
    Jul 2018
    Posts
    103

    Default

    Quote Originally Posted by Sam Graf View Post
    I added Bandwidth Control so I could take a look at the report. I currently have only hostnames in the report, no reference at all to the Untangle device itself.

    So I take it that you haven't recently enabled logging of local inbound and/or outbound sessions?
    I haven't changed any config lately.

  3. #13
    Master Untangler
    Join Date
    Jul 2018
    Posts
    103

    Default

    P.S: I have Bandwith Control on for ages.....

  4. #14
    Master Untangler
    Join Date
    Jul 2018
    Posts
    103

    Default

    P.S: I have Bandwith Control on for ages.....
    ScreenShot 2020-01-14 at 15.14.58.jpg

    Look at the used ports.... ?

  5. #15
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Sunnyvale, CA
    Posts
    8,387

    Default

    Quote Originally Posted by manilx View Post
    yes I have.
    This is why you are seeing it. This is a broadcast on the WAN. In general this is why that box is unchecked. The events are not interesting.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  6. #16
    Master Untangler
    Join Date
    Jul 2018
    Posts
    103

    Default

    Quote Originally Posted by jcoffin View Post
    This is why you are seeing it. This is a broadcast on the WAN. In general this is why that box is unchecked. The events are not interesting.
    I have unchecked this box. Let's see.
    But it always has been checked and the 0.0.0.0 references started only a few days ago.
    Last edited by manilx; 01-14-2020 at 08:35 AM.

  7. #17
    Master Untangler Sam Graf's Avatar
    Join Date
    Feb 2016
    Location
    Michigan
    Posts
    887

    Default

    Quote Originally Posted by manilx View Post
    Look at the used ports.... ?
    That's interesting. That sort of traffic during only part of the day. I don't understand it, but it's good to know and to have here for reference.

  8. #18
    Untangle Ninja f1assistance's Avatar
    Join Date
    Apr 2009
    Location
    Holly Springs, NC
    Posts
    1,209

    Default

    Quote Originally Posted by Sam Graf View Post
    Well, that's interesting. 127.0.0.1 is the Untangle device itself. I had always understood that 0.0.0.0 and 127.0.0.1 are not the same thing, But doing a little research, it seems that it can be the case when a server device has multiple interfaces, software can use 0.0.0.0 as a monitoring technique for things I don't clearly understand.

    So, in short, no doubt your device has multiple interfaces and so 0.0.0.0 is the Untangle device itself.
    I too noticed when editing the hosts file this to be the case, and I thought it began for me back with the release of Windows 10, before that the mvps.org hosts file was populated with 127.0.0.1...
    Vanguard Untangle...because nothing's worse than doing nothing!
    -------
    2, Pentium (R) Dual-Core CPU E5300 @ 2.60GHz 2599.968, 2089.96MB RAM
    And building #7 didn't kill itself!

  9. #19
    Master Untangler Sam Graf's Avatar
    Join Date
    Feb 2016
    Location
    Michigan
    Posts
    887

    Default

    Because it's any IP, match all, and BOOTP/DHCP I wonder if it's traffic from the ISP or the modem. But why new, and why only, roughly, during the daytime/business hours? Strange.

  10. #20
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    24,026

    Default

    It might be an artifact of this: https://arstechnica.com/information-...-cable-modems/

    Is the OP using cable?

    It could also be any number of ISP related monitoring and heartbeat systems.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

Page 2 of 4 FirstFirst 1234 LastLast

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2