[Oisf-users] Finding the source of a broadcast

[Andreas Moe]

Well if ypu have a local network (with say rcf1918 IPs) that unit you
described has to function as a router (and maybe some NATing too?). Not
sure what the real issue is here? All this seems like normal SOHO LAN type
traffic?
25. apr. 2015 23:11 skrev "James Moe" <jimoe at sohnen-moe.com>:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 04/24/2015 08:29 AM, robert.jamison at bt.com wrote:
> > Perhaps Slingbox?  Echostar (parent company registering 00:0d:c5)
> > owns both Sling and Hughes [...]
> >
>   That got me thinking in the right direction. Apparently Echostar
> makes the receivers for Dish TV.
>   It is our Dish satellite receiver that is emitting the STP
> broadcasts; I have it set up to use the wireless straight-to-Internet
> connection for ... whatever. I am surprised that the unit is trying to
> be a router, and more so that the pings show on our local network.
>
> - --
> James Moe
> moe dot james at sohnen-moe dot com
> 520.743.3936
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2
>
> iEYEARECAAYFAlU8AugACgkQzTcr8Prq0ZMEVwCfaxhLiG6qmm4RofbhS3JGxGNb
> 8F0An3xKVZDwOc2PSueN+S3hIR+48v09
> =to5T
> -----END PGP SIGNATURE-----
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> Suricata User Conference November 4 & 5 in Barcelona:
> http://oisfevents.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20150425/318d4b82/attachment-0002.html>