Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum. |
Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
|
 |
05-02-2006, 02:04 AM
|
#1
|
Member
Registered: Dec 2005
Location: South Africa
Distribution: CentOS,Ubuntu,Fedora
Posts: 249
Rep:
|
Kernel Errors present message from Log Watch
Good Day
I received the following in my Logwatch that was delivered to me this morning
WARNING: Kernel Errors Present
202.223.118.228 sent an invalid ICMP type 11, code 1 error to a broadcast: ...: 1 Time(s)
210.130.182.148 sent an invalid ICMP type 11, code 1 error to a broadcast: ...: 1 Time(s)
210.132.250.82 sent an invalid ICMP type 11, code 1 error to a broadcast: ...: 1 Time(s)
210.165.243.53 sent an invalid ICMP type 11, code 1 error to a broadcast: ...: 1 Time(s)
219.103.128.81 sent an invalid ICMP type 11, code 1 error to a broadcast: ...: 1 Time(s)
219.160.4.3 sent an invalid ICMP type 11, code 1 error to a broadcast: ...: 1 Time(s)
221.170.250.1 sent an invalid ICMP type 11, code 1 error to a broadcast: ...: 1 Time(s)
60.37.36.73 sent an invalid ICMP type 11, code 1 error to a broadcast: ...: 1 Time(s)
---------------------- Kernel End -------------------------
Can any one tell me what this means???
Cheers
|
|
|
05-02-2006, 09:18 AM
|
#2
|
Senior Member
Registered: Jan 2005
Location: Manalapan, NJ
Distribution: Fedora x86 and x86_64, Debian PPC and ARM, Android
Posts: 4,593
|
The ICMP codes are here. Specifically:
11 Time Exceeded [RFC792]
1 Fragment Reassembly Time Exceeded
It's likely you were being scanned. Happens all the time.
|
|
|
05-02-2006, 10:13 AM
|
#3
|
Member
Registered: Dec 2005
Location: South Africa
Distribution: CentOS,Ubuntu,Fedora
Posts: 249
Original Poster
Rep:
|
Thanks
Does this mean I was compromised..I assumed it was something like that,I have done a check and root kit check and nothing came up
Cheers
|
|
|
05-02-2006, 10:42 AM
|
#4
|
Senior Member
Registered: Jan 2005
Location: Manalapan, NJ
Distribution: Fedora x86 and x86_64, Debian PPC and ARM, Android
Posts: 4,593
|
No, not at all. It was likely just a scan to see which ports were open on the machine. Once they find things like the ssh server port, they will usually run an automated password guessing script (a dictionary attack) to see if you have any weak passwords, or if you left root enabled for remote login.
Keep your system up to date with maintenance, use strong passwords, disallow remote root access and use root only for system administrative tasks, and you are already ahead of the game.
|
|
|
All times are GMT -5. The time now is 11:39 PM.
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|