From owner-freebsd-questions Mon May 3 12:40:39 1999 Delivered-To: freebsd-questions@freebsd.org Received: from resnet.uoregon.edu (resnet.uoregon.edu [128.223.144.32]) by hub.freebsd.org (Postfix) with ESMTP id AF81815631 for ; Mon, 3 May 1999 12:40:35 -0700 (PDT) (envelope-from dwhite@resnet.uoregon.edu) Received: from localhost (dwhite@localhost) by resnet.uoregon.edu (8.8.8/8.8.8) with ESMTP id MAA29474; Mon, 3 May 1999 12:40:00 -0700 (PDT) (envelope-from dwhite@resnet.uoregon.edu) Date: Mon, 3 May 1999 12:40:00 -0700 (PDT) From: Doug White To: Dan Nelson Cc: Micheal Patterson , Brian Gallucci , FreeBSD Subject: Re: IPFW !! In-Reply-To: <19990501232043.A7595@dan.emsphone.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Sat, 1 May 1999, Dan Nelson wrote: > In the last episode (May 01), Micheal Patterson said: > > From: Brian Gallucci > > > Can someone tell me what this means -> > > > > > > ipfw: 65534 Deny P:54 216.160.169.60 xxx.xxx.xxx.xxx in via fxp0 > > > ipfw: 65534 Deny P:54 216.160.169.60 xxx.xxx.xxx.xxx in via fxp0 > > > ^^^^^ > > > > > > What is P:54 ? > > > > This looks like something that I've seen myself a time or two. From > > what I've seen in my logs, it would appear that all of the entry > > wasn't logged. When I see it, it's when my dx4 100 is under a heavy > > load and logging things like mad (mail, ipfw, etc) and simply missed > > something. I've seen other entries with the ip info but get cut short > > at the interface as well. > > Nah; IPFW prints that when it can't determine the IP protocol type > (usually TCP, UDP or ICMP). Unfortunately, protocol #54 isn't listed > in /etc/protocols. If you get it very often, see if you can add a > "dump" flag to the ipfw ruleset that dumps the entire packet to syslog. Hm, IP protocol 54 is: 54 NHRP NBMA Next Hop Resolution Protocol Doug White Internet: dwhite@resnet.uoregon.edu | FreeBSD: The Power to Serve http://gladstone.uoregon.edu/~dwhite | www.freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message