Well if they are simply ICMP packets (proto 1) then yeah a extended
access-list should be able to trap those.
On Tue, 22 Feb 2000, Rick Johnson wrote:
>
> I tracked it down. Our syslog daemon was getting hammered with DENY
> messages to an ICMP broadcast. It was too fast for the system to keep up
> with. So I turned off the logging for these. Here was the offending entry.
>
> Feb 22 22:20:58 blah kernel: Packet log: input DENY eth0 PROTO=1
> 207.44.231.3:8 255.255.255.255:0 L=92 S=0x00 I=48232 F=0x0000 T=249
>
> I know this is off topic, but is there a way to stop these types of
> packets from reaching the hosts on the network.
>
> Specifically, does anyone know a command to stop this on a Cisco 2514?
>
> -Rick
>
>
> On Tue, 22 Feb 2000, Mike Machado wrote:
>
> >
> > Is this the syslog-ng :) Maybe they thought it how to talk. I have never
> > heard of that before.
> >
> > On Tue, 22 Feb 2000, Rick Johnson wrote:
> >
> > >
> > > I was logged in as root on one of our servers and just recieved the
> > > following message in my ssh window.
> > >
> > > [rsjohn@blah ~]$
> > > Message from syslogd@blah at Tue Feb 22 22:05:45 2000 ...
> > > blah kernel: I=62707 F=0x0000 T=249
> > >
> > >
> > > Anyone know what it might mean?
> > >
> > > Thanks,
> > >
> > > Rick
> > >
> > >
> > > **********************************************************
> > > * Sacramento Linux Users Group Mailing List
> > > *
> > > * Unsubscribe: Send a message to majordomo@saclug.org
> > > * With 'unsubscribe lug-nuts' in the body
> > > *
> > > * http://www.saclug.org
> > >
> >
> > Mike Machado
> > mike@innercite.com
> > InnerCite
> > Network Specialist
> >
> > **********************************************************
> > * Sacramento Linux Users Group Mailing List
> > *
> > * Unsubscribe: Send a message to majordomo@saclug.org
> > * With 'unsubscribe lug-nuts' in the body
> > *
> > * http://www.saclug.org
> >
>
> **********************************************************
> * Sacramento Linux Users Group Mailing List
> *
> * Unsubscribe: Send a message to majordomo@saclug.org
> * With 'unsubscribe lug-nuts' in the body
> *
> * http://www.saclug.org
>
Mike Machado
mike@innercite.com
InnerCite
Network Specialist
**********************************************************
* Sacramento Linux Users Group Mailing List
*
* Unsubscribe: Send a message to majordomo@saclug.org
* With 'unsubscribe lug-nuts' in the body
*
* http://www.saclug.org
This archive was generated by hypermail 2b29 : Fri Feb 25 2000 - 14:29:13 PST