help me understanding iptables logs
Hello,
My logs from iptables look like this:
Feb 21 10:07:38 servername kernel: ***INPUT PACKETS***=>IN=eth0 OUT= MAC=00:0d:56:b8:f8:9c:00:09:5b:58:35:a5:08:00 SRC=134.214.x.x DST=192.168.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=112 ID=5107 DF PROTO=TCP SPT=61945 DPT=22 WINDOW=65007 RES=0x00 ACK FIN URGP=0
Feb 21 10:07:38 servername kernel: ***OUTPUT PACKETS***=>IN= OUT=eth0 SRC=192.168.x.x DST=134.214.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=25772 DF PROTO=TCP SPT=22 DPT=61945 WINDOW=11552 RES=0x00 ACK FIN URGP=0
Everything looks just fine.
But I also have the following line: Feb 21 22:20:11 servername kernel: ***OUTPUT PACKETS***=>IN= OUT=eth0 S46 DF PROTO=TCP SPT=22 DPT=1244 WINDOW=8576 RES=0x00 ACK URGP=0
There is no source IP, no destination IP, nothing.
What could this mean??
ddaas
|