From owner-freebsd-questions Wed Jul 18 9:15: 7 2001 Delivered-To: freebsd-questions@freebsd.org Received: from mail2.mediadesign.nl (md2.mediadesign.nl [212.19.205.67]) by hub.freebsd.org (Postfix) with SMTP id 80F4D37B403 for ; Wed, 18 Jul 2001 09:15:02 -0700 (PDT) (envelope-from alson@mediadesign.nl) Received: (qmail 10392 invoked by uid 1002); 18 Jul 2001 16:15:01 -0000 Date: Wed, 18 Jul 2001 18:15:01 +0200 From: Alson van der Meulen To: freebsd-questions@freebsd.org Subject: Re: unknown protocol P:54 Message-ID: <20010718181501.A15065@md2.mediadesign.nl> Mail-Followup-To: freebsd-questions@freebsd.org References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.3.18i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Wed, Jul 18, 2001 at 06:10:32PM +0100, Heimes, Rene wrote: > hello there! > > i get the following ipfw message: > > Jul 18 17:02:05 fw1 /fw.kernel: ipfw: 2100 Deny P:54 212.6.188.58 > 192.168.2.1 in via xl0 > > what does the P:54 mean? which protocol is that? though i do not > believe, other newsgroup said, this > could be a sign of a portscan... alson@tafi:~$ grep 54 /etc/protocols narp 54 NARP # NBMA Address Resolution Protocol I've no idea what this protocol is used for though.. maybe a www search might show something To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message