LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Server (https://www.linuxquestions.org/questions/linux-server-73/)
-   -   UDP flood? /var/log/messages filling up kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:0 (https://www.linuxquestions.org/questions/linux-server-73/udp-flood-var-log-messages-filling-up-kernel-in%3Deth0-out%3D-mac%3Dff-ff-ff-ff-ff-ff-0-a-4175493876/)

abefroman 02-05-2014 07:50 PM

UDP flood? /var/log/messages filling up kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:0
 
Does anyone know what could be causing this?

/var/log/messages is growing by about 1GB/hr.

It seems these are udp packets from 0.0.0.0 to 255.255.255.255? and from port 68udp to port 67udp.

I don't see any unusual processes running.

TIA

Code:

Feb  5 20:45:46 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:36:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:46 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6d:f2:09:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:46 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:88:71:05:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:47 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6d:d1:25:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:47 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:89:11:4f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:48 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:83:47:63:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:49 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:3f:ce:3f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:49 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:39:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:50 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:9c:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:50 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:1b:27:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:52 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:83:47:63:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:52 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:39:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:52 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:2f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:53 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:9c:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:53 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:1b:27:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:54 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:af:cb:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:55 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:39:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:55 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:2f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:56 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:9c:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:56 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:1b:27:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:56 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6f:b7:bf:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:57 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:af:cb:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:58 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:2f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:58 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:88:63:a4:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:58 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:89:01:33:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:45:59 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:88:71:0c:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:00 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6f:b7:bf:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:00 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:af:cb:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:01 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:88:63:a4:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:01 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:89:01:33:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:02 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:d8:a8:7d:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:02 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:88:71:0c:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:03 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6f:b7:bf:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:03 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:dc:17:4f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:03 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:d6:17:7e:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:04 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:38:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:04 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6f:c4:8b:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:05 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:88:63:a4:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:05 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:89:01:33:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:05 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:d8:a8:7d:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:05 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:88:71:0c:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:06 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:dc:17:4f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:06 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:d6:17:7e:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:07 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:38:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:07 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6f:c4:8b:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:08 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:89:01:34:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:08 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:d8:a8:7d:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:09 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:36:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:09 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6d:f2:09:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:09 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:dc:17:4f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:09 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:d6:17:7e:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:10 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:88:71:05:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:10 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:38:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:10 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6d:d1:25:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:10 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:89:11:4f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:11 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6f:c4:8b:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:11 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:89:01:34:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:12 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:3f:ce:3f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:12 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:36:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:12 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6d:f2:09:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:13 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:88:71:05:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:13 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6d:d1:25:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:13 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:89:11:4f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:14 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:89:01:34:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:15 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:83:47:63:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:15 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:3f:ce:3f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:15 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:36:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:15 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6d:f2:09:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:16 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:88:71:05:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:16 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6d:d1:25:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:17 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:89:11:4f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:18 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:83:47:63:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:18 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:39:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:18 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:3f:ce:3f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:19 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:9c:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:19 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:1b:27:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:21 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:39:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:21 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:83:47:63:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:21 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:2f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:22 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:9c:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:22 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:1b:27:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:23 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:af:cb:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:24 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:39:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:24 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:2f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:25 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:9c:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:25 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:1b:27:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:26 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6f:b7:bf:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
Feb  5 20:46:26 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:af:cb:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556


RubenKelevra 02-05-2014 08:06 PM

Seem that you discovered IPtables logging feature, turn it off and this will disappear.

abefroman 02-05-2014 08:14 PM

Even with logging enabled, why would there be millions of those packets?

Habitual 02-06-2014 08:51 AM

http://www.linklogger.com/UDP67_68.htm says it's dhcp traffic and normal. I'll let you determine what's "normal".

abefroman 02-06-2014 08:53 AM

DHCP isn't enable at all, plus it shouldnt be making millions of requests.

RubenKelevra 02-06-2014 10:23 AM

We dont sit in your network, so find it out!


All times are GMT -5. The time now is 06:25 PM.