Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a Linux box (Debian squeeze) with several NICs. The ones of interest are:

  • eth3 - my main link to the network (dhcp on
  • eth0 - the first connection to my test network (static:
  • eth4 - the second connection to my test network (static:

My routing table looks like this:

$ sudo route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface      *        U     0      0        0 eth3
default         UG    0      0        0 eth3

I have the 2 test net ports connected to each other with a crossover cable and an instance of wireshark running on each port. Every once in a while, I'll see a packet like the following show up. MailSlot Packet

Who could be doing this, and how do I convince them to stop? I do have Samba running on the machine (for a cifs mount) but don't see why it would be sending packets out to unrouted ports. I had a Windows VM running in VMWare Client and thought that might be causing it, but it still happens without it.

What I want is totally silent interfaces so I can run some tests with Scapy over them.

share|improve this question

Looks like AsustekC_54:85:eb is sending a broadcast which is your eth0 interface. There is probably a service on the server broadcasting this on all interfaces.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.