log source and dest

cyb0rg777 · 11-01-2006, 05:53 PM

I keep getting these messages in my log.They are kernel messages that look like firewall hits .The problem is both the source and the destination are outside of my machine.I'm on a switched network ,so how can I be getting these in the first place and why are they hitting my firewall??

cyb0rg777 · 11-02-2006, 08:28 AM

Here is what I'm talking about.Both the src and dst are addresses of different machine,not the one logging.Should I be concerned?

Code:

Nov  1 03:37:10 linux kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:xx:xx:xx:xx:xx:08:00 SRC=xx.xx.xx.xx DST=xx.xx.xx.xx LEN=157 TOS=0x00 PREC=0x00 TTL=150 ID=10647 PROTO=UDP SPT=17853 DPT=162 LEN=137