Stange kernel warnings IN=eth1 OUT= MAC=00:80:c8:4c:0e:.....

humbletech99 · 05-23-2006, 03:50 AM

I've got these strange warnings in my firewall logs. They are logged with a priority of warning and a facility of kernel; I just don't know why or what they are and why am I getting a warning, they look just like packet traffic...

Code:

kernel: IN=eth1 OUT= MAC=00:00:c8:4c:00:d1:00:10:7b:c1:c7:a1:08:00 SRC=195.128.48.63 DST=82.154.253.87 LEN=51 TOS=0x00 PREC=0x00 TTL=111 ID=63193 PROTO=UDP SPT=4067 DPT=6346 LEN=31

////// · 05-23-2006, 06:16 AM

Im almost sure that it is gnutella related traffick.
Capture couple of those packets with ethereal and then do a google search with parts of the data those packets contained. I think you will see in the search results something gnutella related.

humbletech99 · 05-23-2006, 06:22 AM

yeah it seems to be dropped packets, the iptables line has LOG at the end of it. oh well, I'm not gonna change that, I just won't have anything of a lower level than Error sent to my logserver.

unless anybody has a better idea?