[SOLVED] strange kernel log message appeared

Haythem · 11-02-2012, 10:14 AM

i'm running centos 5.8 i noticed that new strange messages appeared in log

Code:

tail /var/log/messages
Nov  2 15:59:16 darkstar kernel: IN=eth1 OUT= MAC=01:00:5e:00:00:01:00:25:90:37:cf:0f:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 
Nov  2 16:01:22 darkstar kernel: IN=eth1 OUT= MAC=01:00:5e:00:00:01:00:25:90:37:cf:0f:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 
Nov  2 16:03:27 darkstar kernel: IN=eth1 OUT= MAC=01:00:5e:00:00:01:00:25:90:37:cf:0f:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 
Nov  2 16:05:22 darkstar ntpd[2058]: time reset -13.499687 s
Nov  2 16:05:33 darkstar kernel: IN=eth1 OUT= MAC=01:00:5e:00:00:01:00:25:90:37:cf:0f:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 
Nov  2 16:07:38 darkstar kernel: IN=eth1 OUT= MAC=01:00:5e:00:00:01:00:25:90:37:cf:0f:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 
Nov  2 16:09:11 darkstar ntpd[2058]: synchronized to LOCAL(0), stratum 10
Nov  2 16:09:44 darkstar kernel: IN=eth1 OUT= MAC=01:00:5e:00:00:01:00:25:90:37:cf:0f:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 
Nov  2 16:10:17 darkstar ntpd[2058]: synchronized to 217.144.143.91, stratum 3
Nov  2 16:11:49 darkstar kernel: IN=eth1 OUT= MAC=01:00:5e:00:00:01:00:25:90:37:cf:0f:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2

thanks for your help!

unSpawn · 11-02-2012, 10:22 AM

PROTO=2 means IGMP and DST=224.0.0.1 means multicast.

lakhera2010 · 11-02-2012, 10:43 AM

Hi

I don't see anything strange in this logs,they are just basic firewall logs.Please refer to this earlier post

http://www.linuxquestions.org/questi...syslog-862056/

Thanks
Prashant

Haythem · 11-02-2012, 10:58 AM

thank you guys good to hear that they belong to multicast and actually not strange. i just thought this is strange message cuz it appears every 2 minutes and i did not see it in log before.