Re: [leaf-user] Log Interpretation Please

2003-02-07 Thread Chris Low
Removing the -l in the 10.0.0.0/8 rules in ipfilter.conf will stop the logging regardless. I could only find three instances of 10.0.0.0/8 in the file. one was commented out, and the other 2 didn't have a -l. Is there another instance I'm missing? # RFC 1918/1627/1597 blocks # $IPCH

Re: [leaf-user] Log Interpretation Please

2003-02-07 Thread Lynn Avants
On Friday 07 February 2003 06:15 pm, Chris Low wrote: Removing the -l in the 10.0.0.0/8 rules in ipfilter.conf will stop the logging regardless. I could only find three instances of 10.0.0.0/8 in the file. one was commented out, and the other 2 didn't have a -l. Is there another instance I'm

Re: [leaf-user] Log Interpretation Please

2003-02-05 Thread Chris
Feb 4 17:29:52 Nimrod kernel: Packet log: input REJECT eth1 PROTO=17 10.10.10.2:4813 10.0.0.14:161 L=84 S=0x00 I=58236 F=0x T=128 (#39) This is a machine broadcasting/requesting SNMP service. Are one of your boxes managing the ouside router or being polled for SNMP info? The only thing

Re: [leaf-user] Log Interpretation Please

2003-02-05 Thread Brad Fritz
Chris, On Wed, 05 Feb 2003 13:38:32 PST Chris Low wrote: Feb 4 17:29:52 Nimrod kernel: Packet log: input REJECT eth1 PROTO=17 10.10.10.2:4813 10.0.0.14:161 L=84 S=0x00 I=58236 F=0x T=128 (#39) This is a machine broadcasting/requesting SNMP service. Are one of your boxes managing

Re: [leaf-user] Log Interpretation Please

2003-02-05 Thread Chris
Thanks, Brad Feb 4 17:29:52 Nimrod kernel: Packet log: input REJECT eth1 PROTO=17 10.10.10.2:4813 10.0.0.14:161 L=84 S=0x00 I=58236 F=0x T=128 (#39) This is a machine broadcasting/requesting SNMP service. Are one of your boxes managing the ouside router or being polled for SNMP info?

Re: [leaf-user] Log Interpretation Please

2003-02-04 Thread Lynn Avants
On Tuesday 04 February 2003 06:15 pm, Chris Low wrote: My log file from Dachstein is getting packed with messages like this: Feb 4 17:29:52 Nimrod kernel: Packet log: input REJECT eth1 PROTO=17 10.10.10.2:4813 10.0.0.14:161 L=84 S=0x00 I=58236 F=0x T=128 (#39) This is a machine

Re: [leaf-user] Log Interpretation Please

2003-02-04 Thread Ray Olszewski
At 04:15 PM 2/4/03 -0800, Chris Low wrote: My log file from Dachstein is getting packed with messages like this: Feb 4 17:29:52 Nimrod kernel: Packet log: input REJECT eth1 PROTO=17 10.10.10.2:4813 10.0.0.14:161 L=84 S=0x00 I=58236 F=0x T=128 (#39) Feb 4 17:29:52 Nimrod kernel: Packet log: