FYI: Over the weekend we found that this is a problem with ppp/pppoe connections, ulogd and kernel 2.4.20.
There is a patch for 2.4.20 kernel resolving that pb and it's fixed in kernel versions 2.4.21 and above. The patch, just in case J. Nilo or someone else wants to add it to Bering kernel: --- net/ipv4/netfilter/ipt_ULOG.c.old 2002-11-29 00:53:15.000000000 +0100 +++ net/ipv4/netfilter/ipt_ULOG.c 2003-08-08 23:42:40.000000000 +0200 @@ -225,6 +225,8 @@ memcpy(pm->mac, (*pskb)->mac.raw, in->hard_header_len); pm->mac_len = in->hard_header_len; } + else + pm->mac_len = 0; if (in) strncpy(pm->indev_name, in->name, sizeof(pm->indev_name)); kp on behalf of Bering-uClibc team Am Freitag, 8. August 2003 09:44 schrieb Luis.F.Correia: > Good morning all, > > I have a very strange log entry... actually a bunch of them. > The system i'm running is our very own Bering uClibc 2.0 beta1 > Although I have had this type of entries before, now i do have > this huuuuuuuuuuuuuuuge MAC address that make little or no sense > to me. > > My question, is this a problem in our internal scripts or just a > misconfiguration (more likely...) > > System details: > > Local net eth0 > Internet ppp0 through eth1 (adsl pppoe) > > > > Aug 8 00:01:25 porteiro Shorewall:net2all:DROP: IN=ppp0 OUT= > MAC=74:2e:62:62:2e:6c:69:6e:6b:73:00:00:00:00:00:00:00:00:00:00:00:00:00:00 >: 00: > 00:00:0f:00:72:6f:6f:74:2e:6c:69:6e:75:78:72:63:00:00:00:00:00:00:00:00:00: >0 0:0 > 0:00:00:00:00:00:00:00:10:00:72:6f:6f:74:2e:6d:6f:75:6e:74:00:00:00:00:00:0 >0 > > :00 > :00:00:45:00:00:30:7e:d2:40:00:78:06:a2:9c:d5:16:75:b5:d5:92:c0:fa:13:49:12 > :: > > 36: > a3:67:c4:6e:00:00:00 SRC=213.22.117.181 DST=213.146.192.250 LEN=48 TOS=00 > PREC=0x00 TTL=120 ID=32466 DF PROTO=TCP SPT=4937 DPT=4662 SEQ=2741486702 > ACK=0 > WINDOW=16384 SYN URGP=0 > Aug 8 00:01:35 porteiro Shorewall:net2all:DROP: IN=ppp0 OUT= MAC= > SRC=64.35.46.69 DST=213.146.192.250 LEN=404 TOS=00 PREC=0x00 TTL=105 > ID=34152 > PROTO=UDP SPT=1301 DPT=1434 LEN=384 > > > Thanks for your help > > Luis Correia > PGP Fingerprint: BC44 D7DA 5A17 F92A CA21 9ABE DFF0 3540 2322 21F6 > Key Server: http://pgp.mit.edu > > > > ------------------------------------------------------- > This SF.Net email sponsored by: Free pre-built ASP.NET sites including > Data Reports, E-commerce, Portals, and Forums are available now. > Download today and enter to win an XBOX or Visual Studio .NET. > http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 > ------------------------------------------------------------------------ > leaf-user mailing list: [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/leaf-user > SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html