From owner-freebsd-questions@FreeBSD.ORG  Mon Sep 20 14:21:41 2010
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 911F41065670
	for <freebsd-questions@freebsd.org>;
	Mon, 20 Sep 2010 14:21:41 +0000 (UTC)
	(envelope-from dan@slightlystrange.org)
Received: from catflap.slightlystrange.org
	(cpc2-cmbg1-0-0-cust385.5-4.cable.virginmedia.com [82.21.105.130])
	by mx1.freebsd.org (Postfix) with ESMTP id 4BF5F8FC18
	for <freebsd-questions@freebsd.org>;
	Mon, 20 Sep 2010 14:21:41 +0000 (UTC)
Received: from dan by catflap.slightlystrange.org with local (Exim 4.72
	(FreeBSD)) (envelope-from <dan@slightlystrange.org>)
	id 1OxhFU-0008Ct-6k
	for freebsd-questions@freebsd.org; Mon, 20 Sep 2010 15:21:40 +0100
Date: Mon, 20 Sep 2010 15:21:40 +0100
From: Daniel Bye <freebsd-questions@slightlystrange.org>
To: freebsd-questions@freebsd.org
Message-ID: <20100920142140.GA12913@catflap.slightlystrange.org>
Mail-Followup-To: freebsd-questions@freebsd.org
References: <201009201158.39179.david@vizion2000.net>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="lrZ03NoBR/3+SXJZ"
Content-Disposition: inline
In-Reply-To: <201009201158.39179.david@vizion2000.net>
User-Agent: Mutt/1.4.2.3i
X-PGP-Fingerprint: D349 B109 0EB8 2554 4D75  B79A 8B17 F97C 1622 166A
X-Operating-System: FreeBSD 8.1-STABLE amd64
Sender: Daniel Bye <dan@slightlystrange.org>
Subject: Re: TCP Logs  Why "Connection attempt to closed port"
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Daniel Bye <freebsd-questions@slightlystrange.org>
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 20 Sep 2010 14:21:41 -0000


--lrZ03NoBR/3+SXJZ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Sep 20, 2010 at 11:58:38AM +0100, David Southwell wrote:
>=20
> Large quantities of these errors constantly appear in log/dmesg.today.
>=20
> Can anyone explain what is going on and whether any action is needed. If =
so=20
> how to go about tracing the cause.

I think you probably have the net.inet.tcp.log_in_vain sysctl set to
something other than 0, causing the kernel to log these connection attempts
on ports where no service is listening. It is probably nothing to worry
about.

If you want to turn these warnings off, check in your /etc/rc.conf for
`log_in_vain=3D1' or similar and remove it - the default, set in
/etc/defaults/rc.conf, is to not log these attempts.=20

Dan

--=20
Daniel Bye
                                                                     _
                                              ASCII ribbon campaign ( )
                                         - against HTML, vCards and  X
                                - proprietary attachments in e-mail / \

--lrZ03NoBR/3+SXJZ
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (FreeBSD)

iEYEARECAAYFAkyXbfQACgkQixf5fBYiFmq4/gCfeRo1hNNo4XzFlSZUN5oQfbml
T2MAnRaH3eT9qCjRUN6FWsMtlYQRwlNk
=0cHg
-----END PGP SIGNATURE-----

--lrZ03NoBR/3+SXJZ--