On Tue, 2003-09-16 at 22:32, valeed wrote: > hi , > I have been receiving lotsa messages on my red hat shrike i686 prompt , > these messages appear even though i am not logged in on the machine > the message appears like this > > IN=eth0 OUT = ff:ff:ff:ff:.........(full mac address) > SRC= 192.9.200.11 DST=192.9.200.255 LEN= 256 TOS=0x00 TTC=128 ID=2949 > PROTO=UDP SPT = 137 LEN=236 > > the numbers that change every message are from these fields > > SRC > LEN > ID > SPT > LEN > > please tell me why these packets display on the prompt & how do i stop these > warnings or messages appearing on the prompt , why is tyhis happened any > clue ? ----- iptables rejects - logging to screen would suggest that you log to syslog or some other file or just drop and not log at all. In this specific case - it would appear that your public ip network has an ip range of 192.9.200.0 with a subnet mask of 255.255.255.0 and someone's computer is broadcasting (192.9.200.255) NETBIOS packets (SPT=137) All in all, iptables blocking NETBIOS packets on public IP addresses is a good thing to do - many bandwidth providers do this for you...many don't. SRC = source ip address DST = destination ip address ID = process id LEN = number of bytes in packet PROTO = protocol (TCP/UDP/OTHER#) Craig -- Shrike-list mailing list Shrike-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/shrike-list
