* Question about dropped packets
@ 2010-10-19 4:42 JD
2010-10-19 5:13 ` Brian Austin - Standard Universal
2010-10-19 5:51 ` Jan Engelhardt
0 siblings, 2 replies; 3+ messages in thread
From: JD @ 2010-10-19 4:42 UTC (permalink / raw)
To: netfilter
I am seeing a lot of
Dropped by firewall: IN=wlan0 OUT=
MAC=ff:ff:ff:ff:ff:ff:60:fb:42:d1:69:71:08:00 SRC=0.0.0.0
DST=255.255.255.255 LEN=328 TOS=0x00 PREC=0x00 TTL=255 ID=25801
PROTO=UDP SPT=68 DPT=67 LEN=308
How can I know who is sending it to my machine if the source IP is all
zeros?
I have no idea if it is coming from the lan or from the wan?
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Question about dropped packets
2010-10-19 4:42 Question about dropped packets JD
@ 2010-10-19 5:13 ` Brian Austin - Standard Universal
2010-10-19 5:51 ` Jan Engelhardt
1 sibling, 0 replies; 3+ messages in thread
From: Brian Austin - Standard Universal @ 2010-10-19 5:13 UTC (permalink / raw)
To: JD; +Cc: netfilter
http://linklogger.com/UDP67_68.htm
dee-aich-cee-pee
IN=wlan0.. is there are wireless lan?
On 19/10/2010 3:42 PM, JD wrote:
> I am seeing a lot of
>
> Dropped by firewall: IN=wlan0 OUT=
> MAC=ff:ff:ff:ff:ff:ff:60:fb:42:d1:69:71:08:00 SRC=0.0.0.0
> DST=255.255.255.255 LEN=328 TOS=0x00 PREC=0x00 TTL=255 ID=25801
> PROTO=UDP SPT=68 DPT=67 LEN=308
>
>
> How can I know who is sending it to my machine if the source IP is all
> zeros?
> I have no idea if it is coming from the lan or from the wan?
>
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Question about dropped packets
2010-10-19 4:42 Question about dropped packets JD
2010-10-19 5:13 ` Brian Austin - Standard Universal
@ 2010-10-19 5:51 ` Jan Engelhardt
1 sibling, 0 replies; 3+ messages in thread
From: Jan Engelhardt @ 2010-10-19 5:51 UTC (permalink / raw)
To: JD; +Cc: netfilter
On Tuesday 2010-10-19 06:42, JD wrote:
> I am seeing a lot of
>
> Dropped by firewall: IN=wlan0 OUT=
> MAC=ff:ff:ff:ff:ff:ff:60:fb:42:d1:69:71:08:00 SRC=0.0.0.0 DST=255.255.255.255
> LEN=328 TOS=0x00 PREC=0x00 TTL=255 ID=25801 PROTO=UDP SPT=68 DPT=67 LEN=308
>
>
> How can I know who is sending it
60:fb:42:d1:69:71 is. If it's wired, you can track down its location.
> I have no idea if it is coming from the lan or from the wan?
"wlan0" of course.
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2010-10-19 5:51 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2010-10-19 4:42 Question about dropped packets JD
2010-10-19 5:13 ` Brian Austin - Standard Universal
2010-10-19 5:51 ` Jan Engelhardt
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.