LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 02-05-2014, 07:50 PM   #1
abefroman
Senior Member
 
Registered: Feb 2004
Location: Chicago
Distribution: CentOS
Posts: 1,249

Rep: Reputation: 53
UDP flood? /var/log/messages filling up kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:0


Does anyone know what could be causing this?

/var/log/messages is growing by about 1GB/hr.

It seems these are udp packets from 0.0.0.0 to 255.255.255.255? and from port 68udp to port 67udp.

I don't see any unusual processes running.

TIA

Code:
Feb  5 20:45:46 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:36:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:46 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6d:f2:09:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:46 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:88:71:05:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:47 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6d:d1:25:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:47 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:89:11:4f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:48 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:83:47:63:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:49 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:3f:ce:3f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:49 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:39:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:50 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:9c:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:50 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:1b:27:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:52 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:83:47:63:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:52 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:39:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:52 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:2f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:53 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:9c:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:53 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:1b:27:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:54 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:af:cb:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:55 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:39:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:55 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:2f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:56 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:9c:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:56 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:1b:27:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:56 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6f:b7:bf:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:57 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:af:cb:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:58 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:2f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:58 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:88:63:a4:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:58 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:89:01:33:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:45:59 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:88:71:0c:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:00 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6f:b7:bf:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:00 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:af:cb:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:01 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:88:63:a4:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:01 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:89:01:33:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:02 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:d8:a8:7d:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:02 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:88:71:0c:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:03 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6f:b7:bf:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:03 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:dc:17:4f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:03 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:d6:17:7e:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:04 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:38:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:04 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6f:c4:8b:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:05 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:88:63:a4:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:05 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:89:01:33:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:05 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:d8:a8:7d:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:05 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:88:71:0c:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:06 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:dc:17:4f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:06 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:d6:17:7e:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:07 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:38:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:07 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6f:c4:8b:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:08 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:89:01:34:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:08 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:d8:a8:7d:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:09 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:36:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:09 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6d:f2:09:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:09 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:dc:17:4f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:09 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:d6:17:7e:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:10 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:88:71:05:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:10 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:38:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:10 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6d:d1:25:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:10 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:89:11:4f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:11 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6f:c4:8b:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:11 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:89:01:34:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:12 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:3f:ce:3f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:12 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:36:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:12 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6d:f2:09:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:13 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:88:71:05:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:13 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6d:d1:25:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:13 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:89:11:4f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:14 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:89:01:34:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:15 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:83:47:63:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:15 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:3f:ce:3f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:15 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:36:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:15 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6d:f2:09:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:16 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:88:71:05:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:16 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6d:d1:25:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:17 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:89:11:4f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:18 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:83:47:63:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:18 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:39:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:18 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:3f:ce:3f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:19 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:9c:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:19 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:1b:27:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:21 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:39:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:21 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:83:47:63:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:21 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:2f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:22 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:9c:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:22 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:1b:27:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:23 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:af:cb:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:24 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9e:ea:39:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:24 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:2f:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:25 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:0a:9c:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:25 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:1b:27:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:26 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:6f:b7:bf:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556 
Feb  5 20:46:26 server kernel: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:25:90:9d:af:cb:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=556
 
Old 02-05-2014, 08:06 PM   #2
RubenKelevra
LQ Newbie
 
Registered: Feb 2014
Posts: 2

Rep: Reputation: Disabled
Seem that you discovered IPtables logging feature, turn it off and this will disappear.
 
Old 02-05-2014, 08:14 PM   #3
abefroman
Senior Member
 
Registered: Feb 2004
Location: Chicago
Distribution: CentOS
Posts: 1,249

Original Poster
Rep: Reputation: 53
Even with logging enabled, why would there be millions of those packets?
 
Old 02-06-2014, 08:51 AM   #4
Habitual
Senior Member
 
Registered: Jan 2011
Distribution: Slack14_64_Multilib
Posts: 3,042
Blog Entries: 4

Rep: Reputation: 737Reputation: 737Reputation: 737Reputation: 737Reputation: 737Reputation: 737Reputation: 737
http://www.linklogger.com/UDP67_68.htm says it's dhcp traffic and normal. I'll let you determine what's "normal".
 
Old 02-06-2014, 08:53 AM   #5
abefroman
Senior Member
 
Registered: Feb 2004
Location: Chicago
Distribution: CentOS
Posts: 1,249

Original Poster
Rep: Reputation: 53
DHCP isn't enable at all, plus it shouldnt be making millions of requests.
 
Old 02-06-2014, 10:23 AM   #6
RubenKelevra
LQ Newbie
 
Registered: Feb 2014
Posts: 2

Rep: Reputation: Disabled
We dont sit in your network, so find it out!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] usb-storage messages flood /var/log/messages CollieJim Gentoo 1 04-05-2012 03:23 AM
/var/log/messages shows IN=eth0 OUT soumen1974 Linux - Networking 2 01-30-2009 05:28 AM
/var/log/messages filling up space. Asim Ahmed Linux - Newbie 1 04-09-2008 01:10 AM
eth0 will not restart. Errors in /var/log/messages soren625 Linux - Networking 8 06-05-2004 12:43 PM
/var/log/messages --filling up rapidly lub0 Linux - Security 1 10-13-2003 07:16 AM


All times are GMT -5. The time now is 05:28 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration