From owner-freebsd-questions Sat May 1 21:21: 8 1999 Delivered-To: freebsd-questions@freebsd.org Received: from dan.emsphone.com (dan.emsphone.com [199.67.51.101]) by hub.freebsd.org (Postfix) with ESMTP id 837C214DC2 for ; Sat, 1 May 1999 21:20:57 -0700 (PDT) (envelope-from dan@dan.emsphone.com) Received: (from dan@localhost) by dan.emsphone.com (8.9.3/8.9.3) id XAA07683; Sat, 1 May 1999 23:20:43 -0500 (CDT) (envelope-from dan) Date: Sat, 1 May 1999 23:20:43 -0500 From: Dan Nelson To: Micheal Patterson Cc: Brian Gallucci , FreeBSD Subject: Re: IPFW !! Message-ID: <19990501232043.A7595@dan.emsphone.com> References: <006001be9404$865d6400$eef51c0a@brian-desktop.briang.org> <01bd01be940b$a6081050$0201a8c0@dredster.ionet.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.95.5i In-Reply-To: <01bd01be940b$a6081050$0201a8c0@dredster.ionet.net>; from "Micheal Patterson" on Sat May 1 14:48:46 GMT 1999 X-OS: FreeBSD 4.0-CURRENT Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG In the last episode (May 01), Micheal Patterson said: > From: Brian Gallucci > > Can someone tell me what this means -> > > > > ipfw: 65534 Deny P:54 216.160.169.60 xxx.xxx.xxx.xxx in via fxp0 > > ipfw: 65534 Deny P:54 216.160.169.60 xxx.xxx.xxx.xxx in via fxp0 > > ^^^^^ > > > > What is P:54 ? > > This looks like something that I've seen myself a time or two. From > what I've seen in my logs, it would appear that all of the entry > wasn't logged. When I see it, it's when my dx4 100 is under a heavy > load and logging things like mad (mail, ipfw, etc) and simply missed > something. I've seen other entries with the ip info but get cut short > at the interface as well. Nah; IPFW prints that when it can't determine the IP protocol type (usually TCP, UDP or ICMP). Unfortunately, protocol #54 isn't listed in /etc/protocols. If you get it very often, see if you can add a "dump" flag to the ipfw ruleset that dumps the entire packet to syslog. -Dan Nelson dnelson@emsphone.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message