LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   Stange kernel warnings IN=eth1 OUT= MAC=00:80:c8:4c:0e:..... (https://www.linuxquestions.org/questions/linux-networking-3/stange-kernel-warnings-in%3Deth1-out%3D-mac%3D00-80-c8-4c-0e-447624/)

humbletech99 05-23-2006 03:50 AM

Stange kernel warnings IN=eth1 OUT= MAC=00:80:c8:4c:0e:.....
 
I've got these strange warnings in my firewall logs. They are logged with a priority of warning and a facility of kernel; I just don't know why or what they are and why am I getting a warning, they look just like packet traffic...
Code:

kernel: IN=eth1 OUT= MAC=00:00:c8:4c:00:d1:00:10:7b:c1:c7:a1:08:00 SRC=195.128.48.63 DST=82.154.253.87 LEN=51 TOS=0x00 PREC=0x00 TTL=111 ID=63193 PROTO=UDP SPT=4067 DPT=6346 LEN=31

////// 05-23-2006 06:16 AM

Im almost sure that it is gnutella related traffick.
Capture couple of those packets with ethereal and then do a google search with parts of the data those packets contained. I think you will see in the search results something gnutella related.

humbletech99 05-23-2006 06:22 AM

yeah it seems to be dropped packets, the iptables line has LOG at the end of it. oh well, I'm not gonna change that, I just won't have anything of a lower level than Error sent to my logserver.

unless anybody has a better idea?


All times are GMT -5. The time now is 09:28 PM.