From mboxrd@z Thu Jan 1 00:00:00 1970 From: Pablo Neira Subject: Re: conntrack_ftp: partial 227 Date: Tue, 17 May 2005 13:48:47 +0200 Message-ID: <4289DA1F.6030200@eurodev.net> References: <1403218a050517012716f22d7f@mail.gmail.com> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <1403218a050517012716f22d7f@mail.gmail.com> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii"; format="flowed" To: Mohamed Eldesoky Cc: netfilter Mohamed Eldesoky wrote: > kernel: conntrack_ftp: partial 227 1874320463+13 > > What does this line mean in the /var/log/messages ??? The FTP conntrack helper has found a partial matching when parsing a request to start a connection in passive mode (ie. needs missing information to track that connection, malformed packets, ...). In that case such packet is silently drop. -- Pablo