I have a bunch of servers and workstations, all with the Shorewall
one-interface setup. On one, which happens to be my test box, I get
tons of lines like this:
Sep 2 14:23:34 chibba Shorewall:net2all:DROP:IN=eth0
OUTMAC=00:50:8d:a4:0a:dd:00:04:80:6b:dc:07:08:00 SRC=128.192.1.72
DST=128.192.66.165 LEN=265 TOS=0x00 PREC=0xC0 TTL=60 ID=61540
PROTO=ICMP TYPE=3 CODE=3 [SRC=128.192.66.165 DST=128.192.1.72 LEN=237
TOS=0x00 PREC=0x00 TTL=125 ID=741 PROTO=UDP SPT=138 DPT=138 LEN=217 ]
Sep 2 14:25:52 chibba Shorewall:net2all:DROP:IN=eth0
OUTMAC=00:50:8d:a4:0a:dd:00:04:80:6b:dc:07:08:00 SRC=128.192.1.72
DST=128.192.66.165 LEN=106 TOS=0x00 PREC=0xC0 TTL=60 ID=61541
PROTO=ICMP TYPE=3 CODE=3 [SRC=128.192.66.165 DST=128.192.1.72 LEN=78
TOS=0x00 PREC=0x00 TTL=125 ID=759 PROTO=UDP SPT=137 DPT=137 LEN=58 ]
What does it mean? A ping request, maybe? Thanks, and excuse my ignorance.
--
ciao,
cj