Go Back   openSUSE Forums > Archives > SLS Archives > ARCHIVES - SuSE Linux > ARCHIVES - Network & Security
Forums FAQ Members List Search Today's Posts Mark Forums Read


ARCHIVES - Network & Security Any network and / or security related questions should be posted in here.

 
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 05-May-2008, 07:28
Babler
Guest
 
Posts: n/a
Default

Suse 10.3 AMD 64bit
Can anyone throw some light on the below log ? Any time that I run dmesg I get a lot of this output.

eth0: link up, 100Mbps, full-duplex, lpa 0x45E1
NET: Registered protocol family 17
audit(1209982653.227:3): audit_pid=3308 old=0 by auid=4294967295
SFW2-INext-DROP-DEFLT IN=eth0 OUT= MAC= SRC=192.168.1.1 DST=224.0.0.251 LEN=64 TOS=0x00 PREC=0x00 TTL=255 ID=0 DF PROTO=UDP SPT=5353 DPT=5353 LEN=44
eth0: no IPv6 routers present
SFW2-INext-DROP-DEFLT IN=eth0 OUT= MAC= SRC=192.168.1.1 DST=224.0.0.251 LEN=64 TOS=0x00 PREC=0x00 TTL=255 ID=0 DF PROTO=UDP SPT=5353 DPT=5353 LEN=44
SFW2-INext-DROP-DEFLT IN=eth0 OUT= MAC= SRC=192.168.1.1 DST=224.0.0.251 LEN=64 TOS=0x00 PREC=0x00 TTL=255 ID=0 DF PROTO=UDP SPT=5353 DPT=5353 LEN=44
SFW2-INext-DROP-DEFLT IN=eth0 OUT= MAC= SRC=192.168.1.1 DST=224.0.0.251 LEN=64 TOS=0x00 PREC=0x00 TTL=255 ID=0 DF PROTO=UDP SPT=5353 DPT=5353 LEN=44
SFW2-OUT-ERROR IN= OUT=eth0 SRC=192.168.1.1 DST=209.68.24.127 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=7815 DF PROTO=TCP SPT=12541 DPT=80 WINDOW=117 RES=0x00 ACK FIN URGP=0 OPT (0101080AFFFF73E0B7DC4AB9)
SFW2-OUT-ERROR IN= OUT=eth0 SRC=192.168.1.1 DST=209.68.24.127 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=7816 DF PROTO=TCP SPT=12541 DPT=80 WINDOW=117 RES=0x00 ACK FIN URGP=0 OPT (0101080AFFFF752BB7DC4AB9)
SFW2-OUT-ERROR IN= OUT=eth0 SRC=192.168.1.1 DST=209.68.24.127 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=7817 DF PROTO=TCP SPT=12541 DPT=80 WINDOW=117 RES=0x00 ACK FIN URGP=0 OPT (0101080AFFFF77C1B7DC4AB9)
SFW2-OUT-ERROR IN= OUT=eth0 SRC=192.168.1.1 DST=209.68.24.127 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=7818 DF PROTO=TCP SPT=12541 DPT=80 WINDOW=117 RES=0x00 ACK FIN URGP=0 OPT (0101080AFFFF7CEDB7DC4AB9)
SFW2-OUT-ERROR IN= OUT=eth0 SRC=192.168.1.1 DST=209.68.24.127 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=7819 DF PROTO=TCP SPT=12541 DPT=80 WINDOW=117 RES=0x00 ACK FIN URGP=0 OPT (0101080AFFFF8745B7DC4AB9)
SFW2-INext-DROP-DEFLT IN=eth0 OUT= MAC= SRC=192.168.1.1 DST=224.0.0.251 LEN=64 TOS=0x00 PREC=0x00 TTL=255 ID=0 DF PROTO=UDP SPT=5353 DPT=5353 LEN=44
  #2 (permalink)  
Old 05-May-2008, 08:42
broch
Guest
 
Posts: n/a
Default

looks like some problems with iptables

maybe check
iptables -nvL OUTPUT
this will show the rule causing SFW2-OUT-ERRORs shoild be in the log.

not sure if this will help
  #3 (permalink)  
Old 05-May-2008, 15:56
Babler
Guest
 
Posts: n/a
Default

Quote:
looks like some problems with iptables

maybe check
iptables -nvL OUTPUT
this will show the rule causing SFW2-OUT-ERRORs shoild be in the log.

not sure if this will help
[/b]
tv:/home/brian # iptables -nvL OUTPUT
Chain OUTPUT (policy ACCEPT 170 packets, 8408 bytes)
pkts bytes target prot opt in out source destination
228 12312 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
63732 4465K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW,RELATED,ESTABLISHED
44 2168 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 3/min burst 5 LOG flags 6 level 4 prefix `SFW2-OUT-ERROR '
tv:/home/brian #

  #4 (permalink)  
Old 06-May-2008, 09:31
broch
Guest
 
Posts: n/a
Default

try disable avahi/zeroconf

see if this will stop 224.0.0.251
 

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




 

Search Engine Friendly URLs by vBSEO 3.3.0 RC2