Top Latest Append

pterjan's diary


  Photo Celebrity!

Today one of my numerous photos was used to illustrate an article on a big French newspaper website!

Thanks to the guy who wrote me that he saw one of my photos there, I wouldn't have seen it. The reason he wrote was to ask me if I allowed commercial newspapers to use my photos for free with a link to the price of advertising on their website. Yes I do, my photos are almost all under CC-BY-SA license, and I'm proud to have my name on this website even if the photo is really not my best one :)

Today's TSUKKOMI(Total: 38) [Add a TSUKKOMI]


  mbt shoes review [mbt schuhe moja black pterjan's diary(2008-12-03) mbt shoes review]

  ray ban prezzi [pterjan's diary(2008-12-03) ray ban prezzi]

  cheap toms shoes [pterjan's diary(2008-12-03) cheap toms shoes]



Few days ago I was connected through Numericable and I started wireshark to diagnose a local issue.

I was suprised to see a lot of traffic, the most visible one was about 20 ARP requests per second, coming from their routers and asking for other customers.

Cisco_29:c1:05        Broadcast             ARP      Who has  Tell
Cisco_29:c1:05        Broadcast             ARP      Who has  Tell
Cisco_29:c1:05        Broadcast             ARP      Who has  Tell
Cisco_29:c1:05        Broadcast             ARP      Who has  Tell

That's surprising than they forward the ARP broadcast to the local network, but that's not the interesting part.

Hidden in the flow, were quite a lot of DHCP answers I will now comment on.

Here is common part of all the DHCP answer, nothing very interesting:

Ethernet II, Src: Cisco_29:c1:05 (00:15:f9:29:c1:05), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol, Src: (, Dst: (
User Datagram Protocol, Src Port: bootps (67), Dst Port: bootpc (68)
    Message type: Boot Reply (2)

First the ones for the user machines, probably when the modem is not set up as a router, as the one I was connected to had given me a 192.168.0.x address and was masquerading me :

Your (client) IP address: (
    Relay agent IP address: (
    Client MAC address: HewlettP_5b:cf:a9 (00:1a:4b:5b:cf:a9)
    Option: (t=53,l=1) DHCP Message Type = DHCP ACK
    Option: (t=54,l=4) Server Identifier =
    Option: (t=1,l=4) Subnet Mask =
    Option: (t=3,l=4) Router =

Your (client) IP address: ( Relay agent IP address: ( Client MAC address: AsustekC_7f:3d:ee (00:15:f2:7f:3d:ee) Option: (t=53,l=1) DHCP Message Type = DHCP Offer Option: (t=54,l=4) Server Identifier = Option: (t=1,l=4) Subnet Mask = Option: (t=3,l=4) Router =

So, I get the IP and MAC of other customer's machines, still not very interesting

Relay agent IP address: (
    Client MAC address: AppleCom_ef:8e:24 (00:30:65:ef:8e:24)
    Option: (t=53,l=1) DHCP Message Type = DHCP NAK
    Option: (t=56,l=95) Message = "Requested lease was active and assigned to different client: 01:00:1f:33:de:10:cd"
    Option: (t=54,l=4) Server Identifier =

Does this mean you can't change the connected machine until the (1 hour) lease has expired ?

Now some more interesting ones, for the modems. The common part, giving internal addresses of their servers:

    Next server IP address: (
    Relay agent IP address: (
    Option: (t=53,l=1) DHCP Message Type = DHCP Offer
    Option: (t=54,l=4) Server Identifier =
    Option: (t=1,l=4) Subnet Mask =
    Option: (t=3,l=4) Router =
    Option: (t=4,l=4) Time Server =

And now the interesting part, the one which changes:

    Your (client) IP address: (
    Client MAC address: Motorola_5e:34:82 (00:0e:5c:5e:34:82)
    Boot file name:

Your (client) IP address: ( Client MAC address: NVPhilip_4b:be:4c (00:90:3e:4b:be:4c) Boot file name:
Your (client) IP address: ( Client MAC address: NVPhilip_56:18:e3 (00:90:3e:56:18:e3) Boot file name:

So, there are two brands of modem, and boot file is different if you subscribed to the 30Mb/1Mb offer, or to the 512kb/128kb one. Would your connection get faster if you trick your modem into getting the other file? I don't know but I would not be surprised...

I had thought of getting a connection through them in addition to my current DSL, as they promise 100Mb/s here before the end of 2008 (which is almost finished). After this experience I have decided to never subscribe to their services, playing with their network would be too tempting.

I think I didn't do anything bad, only looked at packets sent to me on the local network :) I didn't even try to see if the 10.x addresses are routed by the modem (I'm almost sure they are not).

Another point, all people in this building connected with Numericable (that's 12 of them) have WEP network on channel 6. I hope the modem supports WPA and selecting other channels. WEP when you have so much permanent unwanted traffic is very weak...

Today's TSUKKOMI(Total: 5) [Add a TSUKKOMI]


  bkor [I thought it was pretty well known. At least my ISP checks if you change the config (it is still possible to change it..]

  ChrisS [I do hope they lock things down. That's a good way of going broke!]

  Nico [In 2007, VoIP traffic for other customer was broadcasted to everyone. And their DNS servers gave you reverse dns for 1..]


  Photo Celebrity 2

This FlickrMail is to let you know that your photo: that you submitted to the Your Design City Group has been selected by the judges to be in the "Final 20" to be printed for the exhibition. The exhibition will be at The Design Museum from Tuesday 6th of January – Sunday 11th January 2009.

Wow, I really did not expect being selected among the 1124 photos, there are a lot of great ones! I now have to see if I can go to London and visit the Design Museum on 10th/11th January.

I have to thank GUADEC for having given me the opportunity to take this photo last year :)

Update: My day off on Monday 12 was validated by fcrozat so I could get a round trip to London for 77 euros and will be able to attend the exhibition!

Today's TSUKKOMI(Total: 39) [Add a TSUKKOMI]


  cheap jordans [I’m still learning from you, as I’m making my way to the top as well. I definitely liked reading all that is posted on..]

  how do you make money  [Appreciate you sharing, great blog. Cool. <a href="">health</a> ]

  louboutin chaussures [Sweeps season runs from January 31 to February 27. During the week of February 18 when Matt was away the Today sho..]



I have been familiar with cowsay -f sodomized for years, but found out tonight that Debian has a patch adding another one, cowsay -f sodomized-sheep !

< >
  \                 __ 
   \               (oo)
    \              (  )
     \             /--\
       __         / \  \ 
      UooU\.'@@@@@@`.\  )
      \__/(@@@@@@@@@@) /
           `YY~~~~YY' \\
            ||    ||   >> 
Today's TSUKKOMI(Total: 9) [Add a TSUKKOMI]


  boklm [mais que fait la SPA ??]

  El muero [Every planet has a moron.]

  Asgeir [La meilleure nouvelle depuis la sortie d'Emacs 22 !]


  Joyeuses fêtes

Joyeuses fêtes


  Last post for this year

I have upgraded tdiary from 2.0.4 to 2.3.1, I hope it won't flood planets :)

Happy new year everyone!