LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 11-01-2006, 05:53 PM   #1
cyb0rg777
Member
 
Registered: Dec 2004
Location: ~
Distribution: Debian
Posts: 143
Blog Entries: 8

Rep: Reputation: 15
log source and dest


I keep getting these messages in my log.They are kernel messages that look like firewall hits .The problem is both the source and the destination are outside of my machine.I'm on a switched network ,so how can I be getting these in the first place and why are they hitting my firewall??

Last edited by cyb0rg777; 11-02-2006 at 01:51 AM.
 
Old 11-02-2006, 08:28 AM   #2
cyb0rg777
Member
 
Registered: Dec 2004
Location: ~
Distribution: Debian
Posts: 143
Blog Entries: 8

Original Poster
Rep: Reputation: 15
Here is what I'm talking about.Both the src and dst are addresses of different machine,not the one logging.Should I be concerned?

Code:
Nov  1 03:37:10 linux kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:xx:xx:xx:xx:xx:08:00 SRC=xx.xx.xx.xx DST=xx.xx.xx.xx LEN=157 TOS=0x00 PREC=0x00 TTL=150 ID=10647 PROTO=UDP SPT=17853 DPT=162 LEN=137
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Building nvidia-kernel-source error log jonasan Linux - Software 1 05-28-2006 09:52 PM
Dest Unreachable with PPP csb Linux - Networking 4 07-31-2005 06:36 AM
Unix log file as source for Oracle DB tornadoburn Programming 1 12-12-2003 06:47 PM
ongoing messages in the message log martian source saavik Linux - Networking 4 09-23-2002 06:52 AM
How would i log the source MAC address w/ iptables? phek Linux - Security 12 12-14-2001 12:18 PM


All times are GMT -5. The time now is 05:47 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration