I tracked it down. Our syslog daemon was getting hammered with DENY
messages to an ICMP broadcast. It was too fast for the system to keep up
with. So I turned off the logging for these. Here was the offending entry.
Feb 22 22:20:58 blah kernel: Packet log: input DENY eth0 PROTO=1
207.44.231.3:8 255.255.255.255:0 L=92 S=0x00 I=48232 F=0x0000 T=249
I know this is off topic, but is there a way to stop these types of
packets from reaching the hosts on the network.
Specifically, does anyone know a command to stop this on a Cisco 2514?
-Rick
On Tue, 22 Feb 2000, Mike Machado wrote:
>
> Is this the syslog-ng :) Maybe they thought it how to talk. I have never
> heard of that before.
>
> On Tue, 22 Feb 2000, Rick Johnson wrote:
>
> >
> > I was logged in as root on one of our servers and just recieved the
> > following message in my ssh window.
> >
> > [rsjohn@blah ~]$
> > Message from syslogd@blah at Tue Feb 22 22:05:45 2000 ...
> > blah kernel: I=62707 F=0x0000 T=249
> >
> >
> > Anyone know what it might mean?
> >
> > Thanks,
> >
> > Rick
> >
> >
> > **********************************************************
> > * Sacramento Linux Users Group Mailing List
> > *
> > * Unsubscribe: Send a message to majordomo@saclug.org
> > * With 'unsubscribe lug-nuts' in the body
> > *
> > * http://www.saclug.org
> >
>
> Mike Machado
> mike@innercite.com
> InnerCite
> Network Specialist
>
> **********************************************************
> * Sacramento Linux Users Group Mailing List
> *
> * Unsubscribe: Send a message to majordomo@saclug.org
> * With 'unsubscribe lug-nuts' in the body
> *
> * http://www.saclug.org
>
**********************************************************
* Sacramento Linux Users Group Mailing List
*
* Unsubscribe: Send a message to majordomo@saclug.org
* With 'unsubscribe lug-nuts' in the body
*
* http://www.saclug.org
This archive was generated by hypermail 2b29 : Fri Feb 25 2000 - 14:29:13 PST