Yes it's the port mapper. But there only few broadcasts per minute so i
don't think this is the cause of my problem. Have you personnaly had those
sort of error logs ? And in which situation ? Are you thinking about some
sort of worm ?

--
S�bastien Cantos <[EMAIL PROTECTED]>
Responsable R�seau Neopost DIVA

> -----Message d'origine-----
> De : Mailing list for discussion of Firewall-1
> [mailto:[EMAIL PROTECTED] De la
> part de Torkel Mathisen
> Envoy� : vendredi 16 janvier 2004 14:02
> � : [EMAIL PROTECTED]
> Objet : Re: [FW-1] Strange log error
>
> Any why not?
>
> Port 111 is rpc atleast :)
>
> Regards,
> Torkel
>
> > -----Original Message-----
> > From: S�bastien Cantos [mailto:[EMAIL PROTECTED]
> > Sent: 16. januar 2004 09:59
> > To: [EMAIL PROTECTED]
> > Subject: Re: [FW-1] Strange log error
> >
> >
> > Yes there are hundreds log like this per second.
> > I've detected an internal box which sends broadcast messages
> > to destination
> > port 111 and incrementing its source port at each packet
> > sended, but i don't
> > think you are talking about this.
> >
> >
> > --
> > S�bastien Cantos <[EMAIL PROTECTED]>
> > Responsable R�seau Neopost DIVA
> >
> > > -----Message d'origine-----
> > > De : Mailing list for discussion of Firewall-1
> > > [mailto:[EMAIL PROTECTED] De la
> > > part de Joshi, Umesh
> > > Envoy� : jeudi 15 janvier 2004 18:46
> > > � : [EMAIL PROTECTED]
> > > Objet : Re: [FW-1] Strange log error
> > >
> > > By lots, you probably mean in the hundreds per second, right?
> > > Check your firewall logs and look for internal sources
> > making multiple
> > > requests to rpc-mapper on sequentially numbered destinations.
> > >
> > >
> > > -----Original Message-----
> > > From: Sibastien Cantos [mailto:[EMAIL PROTECTED]
> > > Sent: Thursday, January 15, 2004 8:34 AM
> > > To: [EMAIL PROTECTED]
> > > Subject: [FW-1] Strange log error
> > >
> > >
> > > Hello,
> > >
> > > I get lots of messages in my /var/log/messages :
> > >
> > > fwx_xlate_method: fwxlate.c STATIC port xlation on ip protocol udp
> > > (-122203536)
> > > fwconn_pending_intercept: ld_set_wto(conn_nsons) failed
> > > fwconn_pending_intercept: ld_set_wto(conn_nsons) failed
> > > fwconn_pending_intercept: ld_set_wto(conn_nsons) failed
> > > .....
> > >
> > >
> > > I'm using FW1 NG3 on linux RedHat with cluster XL.
> > > How can i correct this ?
> > >
> > > Thanks a lot for your answers.
> > >
> > > Regards,
> > >
> > > --
> > > S�bastien Cantos <[EMAIL PROTECTED]>
> > > Responsable R�seau Neopost DIVA
> > >
> > > =================================================
> > > To set vacation, Out-Of-Office, or away messages,
> > > send an email to [EMAIL PROTECTED]
> > > in the BODY of the email add:
> > > set fw-1-mailinglist nomail
> > > =================================================
> > > To unsubscribe from this mailing list,
> > > please see the instructions at
> > > http://www.checkpoint.com/services/mailing.html
> > > =================================================
> > > If you have any questions on how to change your
> > > subscription options, email
> > > [EMAIL PROTECTED]
> > > =================================================
> > >
> > > =================================================
> > > To set vacation, Out-Of-Office, or away messages,
> > > send an email to [EMAIL PROTECTED]
> > > in the BODY of the email add:
> > > set fw-1-mailinglist nomail
> > > =================================================
> > > To unsubscribe from this mailing list,
> > > please see the instructions at
> > > http://www.checkpoint.com/services/mailing.html
> > > =================================================
> > > If you have any questions on how to change your
> > > subscription options, email
> > > [EMAIL PROTECTED]
> > > =================================================
> > >
> >
> > =================================================
> > To set vacation, Out-Of-Office, or away messages,
> > send an email to [EMAIL PROTECTED]
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your
> > subscription options, email
> > [EMAIL PROTECTED]
> > =================================================
> >
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to