LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 05-02-2006, 03:04 AM   #1
shawnbishop
Member
 
Registered: Dec 2005
Location: South Africa
Distribution: CentOS,Ubuntu,Fedora
Posts: 249

Rep: Reputation: 30
Kernel Errors present message from Log Watch


Good Day

I received the following in my Logwatch that was delivered to me this morning

WARNING: Kernel Errors Present
202.223.118.228 sent an invalid ICMP type 11, code 1 error to a broadcast: ...: 1 Time(s)
210.130.182.148 sent an invalid ICMP type 11, code 1 error to a broadcast: ...: 1 Time(s)
210.132.250.82 sent an invalid ICMP type 11, code 1 error to a broadcast: ...: 1 Time(s)
210.165.243.53 sent an invalid ICMP type 11, code 1 error to a broadcast: ...: 1 Time(s)
219.103.128.81 sent an invalid ICMP type 11, code 1 error to a broadcast: ...: 1 Time(s)
219.160.4.3 sent an invalid ICMP type 11, code 1 error to a broadcast: ...: 1 Time(s)
221.170.250.1 sent an invalid ICMP type 11, code 1 error to a broadcast: ...: 1 Time(s)
60.37.36.73 sent an invalid ICMP type 11, code 1 error to a broadcast: ...: 1 Time(s)

---------------------- Kernel End -------------------------


Can any one tell me what this means???

Cheers
 
Old 05-02-2006, 10:18 AM   #2
macemoneta
Senior Member
 
Registered: Jan 2005
Location: Manalapan, NJ
Distribution: Fedora x86 and x86_64, Debian PPC and ARM, Android
Posts: 4,593
Blog Entries: 2

Rep: Reputation: 344Reputation: 344Reputation: 344Reputation: 344
The ICMP codes are here. Specifically:

11 Time Exceeded [RFC792]
1 Fragment Reassembly Time Exceeded

It's likely you were being scanned. Happens all the time.
 
Old 05-02-2006, 11:13 AM   #3
shawnbishop
Member
 
Registered: Dec 2005
Location: South Africa
Distribution: CentOS,Ubuntu,Fedora
Posts: 249

Original Poster
Rep: Reputation: 30
Thanks

Does this mean I was compromised..I assumed it was something like that,I have done a check and root kit check and nothing came up

Cheers
 
Old 05-02-2006, 11:42 AM   #4
macemoneta
Senior Member
 
Registered: Jan 2005
Location: Manalapan, NJ
Distribution: Fedora x86 and x86_64, Debian PPC and ARM, Android
Posts: 4,593
Blog Entries: 2

Rep: Reputation: 344Reputation: 344Reputation: 344Reputation: 344
No, not at all. It was likely just a scan to see which ports were open on the machine. Once they find things like the ssh server port, they will usually run an automated password guessing script (a dictionary attack) to see if you have any weak passwords, or if you left root enabled for remote login.

Keep your system up to date with maintenance, use strong passwords, disallow remote root access and use root only for system administrative tasks, and you are already ahead of the game.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
wvdial connects then disconnects - message log has no errors shlape Linux - Networking 1 04-16-2005 06:28 PM
Kernel errors in log Sillysoft Linux - General 0 07-27-2004 10:41 AM
Strange errors on boot and in message log Psychocop156 Fedora 0 07-14-2004 12:13 PM
kernel log errors robert_edwards Red Hat 0 04-30-2004 05:19 PM
mail - "Kernel Errors Present" DirkSchreckmann Linux - Newbie 2 03-12-2004 11:45 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 10:08 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration