Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back > Forums > Linux Forums > Linux - Networking
User Name
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.


  Search this Thread
Old 09-14-2004, 02:15 PM   #1
LQ Newbie
Registered: Feb 2004
Posts: 25

Rep: Reputation: 15
unwanted packets on terminal

Hi all,
Recently I installed a PentiumII in the living room as a mp3 server. I used Debian unstable with a new kernel version 2.6.5. Together with my workstation and NFS everything works like a dream. But if I connect a monitor to the PII it soon gets flooded with messages like:
IN=eth0 OUT= MAC= SRC= DST= LEN=263 TOS=0x00 PREC=0x00 TTL=64 ID=49 DF PROTO=UDP SPT=138 DPT=138 LEN=243
IN=eth0 OUT= MAC= SRC= DST= LEN=235 TOS=0x00 PREC=0x00 TTL=64 ID=50 DF PROTO=UDP SPT=138 DPT=138 LEN=215
These messages also appear in syslog.
Can someone tell me how to get rid of those messages? They make mp3blaster unreadable.
Old 09-14-2004, 03:51 PM   #2
Registered: Sep 2004
Location: Texas, USA
Distribution: Fedora
Posts: 620

Rep: Reputation: 31
I can offer a couple of pointers:

1) The log entries look to be from the netfilter package. i.e. iptables

2) The packets referenced are microsoft datagram broadcast packets. i.e. local master browser
announcement, master broswer announcement, one smb host broadcasting for another smb host, etc...

What I can't tell from the log message is wether or not these packets were rejected
or were they accepted and just simply logged. The iptable rules you run on this
system should answer that

If you simply want to stop these messages from being logged to the console, look at:
man dmesg
in particular, the -n option

Otherwise, take a look at your iptable rules and fix the rule thats causing the problem.
Old 09-14-2004, 03:57 PM   #3
LQ Newbie
Registered: Feb 2004
Posts: 25

Original Poster
Rep: Reputation: 15
That samba part made sense. I'll look into it. Thanks.
Old 09-14-2004, 04:03 PM   #4
LQ Newbie
Registered: Feb 2004
Posts: 25

Original Poster
Rep: Reputation: 15
btw, how do you see these packets are microsoft datagrams?
Old 09-14-2004, 04:54 PM   #5
Registered: Aug 2003
Location: Seattle, Wa
Distribution: Fedora,Trustix,Debian
Posts: 290

Rep: Reputation: 30
SPT=138 DPT=138
port numbers specify 138 which is for netbios datagram
You could also disable netbios over tcpip on all your windows machines too.

Also check in your /etc/syslog.conf file for a line like this
kern.* /dev/console
kern.* *
and just comment it out like this by putting a # sign in front of it
#kern.* /dev/console

Last edited by zatriz; 09-14-2004 at 04:59 PM.
Old 09-15-2004, 02:28 AM   #6
LQ Newbie
Registered: Feb 2004
Posts: 25

Original Poster
Rep: Reputation: 15
I indeed checked the /etc/syslog.conf but found nothing out of the ordinary there. What I _did_ find where some iptables with weird LOG messages, those where no longer necessary and after deleting them my problem was solved! Thank you all for the fast responses and for putting me on track.
Old 05-05-2005, 04:23 PM   #7
LQ Newbie
Registered: May 2005
Location: Brampton
Distribution: Fedora Core 3
Posts: 1

Rep: Reputation: 0

I'm having the same problem, but I've found no weird log stuff in the /etc/syslog.conf file to remove (not that I would know what to remove, as I am a newbie)

Here's what I have

3 computers behind a linksys router
computer #1 - wired, fedora core 3 which I am trying to configure using "Setting up LAMP" by two guys named Eric
computer #2 - wired, winxp sp2 sending broadcasts that are being picked up by computer #1 and displayed on the console
computer #3 - wireless, running winxp sp2 also sending broadcasts

The console keeps poping up something like:

IN-eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:06.. SCR= (or 102) DST= LEN=243 TOS=0x00 PREC=0x00 TTL=128 ID=31118 (changes) PROTO=UDP SPT=137 (or 138) DPT=138 (or 137) LEN=58

Otherthan replacing the winXP OS's with Fedora, does anyone have any suggestions????

This happened after I setup the firewall iptables.

Old 05-07-2005, 06:28 AM   #8
LQ Newbie
Registered: Feb 2004
Posts: 25

Original Poster
Rep: Reputation: 15
Yeah those log messages aren't alway it. It's been awhile now, but if i remember correctly you should check you NAT pre-routing table with: $:iptables -t nat -L
I believe I found some weirdness there and after removing it things where fine.

Hope this helps!


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Terminal Executes unwanted command at openning blames Linux - General 4 12-28-2004 04:16 PM
packets sent VS packets received fsasya Linux - Networking 0 07-18-2004 07:11 PM
encapsulating TCP packets in UDP packets... yoshi95 Programming 3 06-03-2004 02:53 PM
Unwanted HD detecting. Nukem Mandriva 14 01-24-2004 11:47 AM
Unwanted shutdown tireseas Linux - Hardware 17 01-02-2004 06:35 PM > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 11:39 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration