Skip to contentSkip to conversation

TFTP ..unable to track...

DISCUSSION Gautham Thavva 2 participants 2 messages May 12, 2003 – May 16, 2003

lore
Share & tools
lore
#0 lore raw

I have a linux firewall (using iptables 1.2.6a). This machine is running a TFTP client. I am unable to track the TFTP sessions.

I have built the tftp.patch, the netfilter tracking module for tftp by Magnus Boden. I have not been able to track the sessions.

The TFTP Read Request goes to the destination port 69 at the server side. The packets at the INPUT side to the firewall is at a port for which I have no prior knowledge.

Please can someone suggest a way to filter in only the tftp packets.

with regards,
Gautham Thavva

____________________________________________________________
Get advanced SPAM filtering on Webmail or POP Mail ... Get Lycos Mail!
http://login.mail.lycos.com/r/referral?aid=27005

#1 lore raw
Quoted 2 lines · Gautham Thavva

This machine is running a TFTP client. I am unable to track the TFTP sessions.

See patch-o-matic. There's a patch for TFTP conntrack.

Signature · 4 lines
Cédric Blancher  <[email protected]>
IT systems and networks security - Cartel Sécurité
Phone : +33 (0)1 44 06 97 87 - Fax: +33 (0)1 44 06 97 99
PGP KeyID:157E98EE  FingerPrint:FA62226DA9E72FA8AECAA240008B480E157E98EE