Skip to contentSkip to conversation

Question about dropped packets

DISCUSSION JD 3 participants 3 messages Oct 19, 2010

lore
Share & tools
lore

JD

author
#0 lore raw

I am seeing a lot of

Dropped by firewall: IN=wlan0 OUT= MAC=ff:ff:ff:ff:ff:ff:60:fb:42:d1:69:71:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=328 TOS=0x00 PREC=0x00 TTL=255 ID=25801 PROTO=UDP SPT=68 DPT=67 LEN=308

How can I know who is sending it to my machine if the source IP is all zeros? I have no idea if it is coming from the lan or from the wan?

#1 lore raw

http://linklogger.com/UDP67_68.htm

dee-aich-cee-pee

IN=wlan0.. is there are wireless lan?

Quoted 12 lines · JD

I am seeing a lot of

Dropped by firewall: IN=wlan0 OUT= MAC=ff:ff:ff:ff:ff:ff:60:fb:42:d1:69:71:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=328 TOS=0x00 PREC=0x00 TTL=255 ID=25801 PROTO=UDP SPT=68 DPT=67 LEN=308

How can I know who is sending it to my machine if the source IP is all zeros? I have no idea if it is coming from the lan or from the wan?

Signature · 3 lines
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
#2 lore raw
In reply to JD
Quoted 8 lines · JD

I am seeing a lot of

Dropped by firewall: IN=wlan0 OUT= MAC=ff:ff:ff:ff:ff:ff:60:fb:42:d1:69:71:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=328 TOS=0x00 PREC=0x00 TTL=255 ID=25801 PROTO=UDP SPT=68 DPT=67 LEN=308

How can I know who is sending it

60:fb:42:d1:69:71 is. If it's wired, you can track down its location.

Quoted 1 line

I have no idea if it is coming from the lan or from the wan?

"wlan0" of course.