Date: Mon, 3 May 1999 12:40:00 -0700 (PDT) From: Doug White <dwhite@resnet.uoregon.edu> To: Dan Nelson <dnelson@emsphone.com> Cc: Micheal Patterson <micheal@ionet.net>, Brian Gallucci <noc@expnet.net>, FreeBSD <freebsd-questions@FreeBSD.ORG> Subject: Re: IPFW !! Message-ID: <Pine.BSF.4.03.9905031239470.20321-100000@resnet.uoregon.edu> In-Reply-To: <19990501232043.A7595@dan.emsphone.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, 1 May 1999, Dan Nelson wrote: > In the last episode (May 01), Micheal Patterson said: > > From: Brian Gallucci <noc@expnet.net> > > > Can someone tell me what this means -> > > > > > > ipfw: 65534 Deny P:54 216.160.169.60 xxx.xxx.xxx.xxx in via fxp0 > > > ipfw: 65534 Deny P:54 216.160.169.60 xxx.xxx.xxx.xxx in via fxp0 > > > ^^^^^ > > > > > > What is P:54 ? > > > > This looks like something that I've seen myself a time or two. From > > what I've seen in my logs, it would appear that all of the entry > > wasn't logged. When I see it, it's when my dx4 100 is under a heavy > > load and logging things like mad (mail, ipfw, etc) and simply missed > > something. I've seen other entries with the ip info but get cut short > > at the interface as well. > > Nah; IPFW prints that when it can't determine the IP protocol type > (usually TCP, UDP or ICMP). Unfortunately, protocol #54 isn't listed > in /etc/protocols. If you get it very often, see if you can add a > "dump" flag to the ipfw ruleset that dumps the entire packet to syslog. Hm, IP protocol 54 is: 54 NHRP NBMA Next Hop Resolution Protocol Doug White Internet: dwhite@resnet.uoregon.edu | FreeBSD: The Power to Serve http://gladstone.uoregon.edu/~dwhite | www.freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.03.9905031239470.20321-100000>