From owner-freebsd-hackers@FreeBSD.ORG  Thu Jan 13 16:32:03 2005
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id AFA5E16A4CE
	for <freebsd-hackers@freebsd.org>;
	Thu, 13 Jan 2005 16:32:03 +0000 (GMT)
Received: from ns.tjc.ru (ns.tjc.ru [212.30.133.170])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 0183A43D46
	for <freebsd-hackers@freebsd.org>;
	Thu, 13 Jan 2005 16:32:03 +0000 (GMT)	(envelope-from dvg_lab@mail.ru)
Received: from localhost (localhost [127.0.0.1])
	by ns.tjc.ru (Postfix) with ESMTP id 1BFFEBDC18
	for <freebsd-hackers@freebsd.org>;
	Thu, 13 Jan 2005 19:32:53 +0300 (MSK)
Received: from ns.tjc.ru ([127.0.0.1])
 by localhost (ns.tjc.ru [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
 id 95384-03 for <freebsd-hackers@freebsd.org>;
 Thu, 13 Jan 2005 19:32:51 +0300 (MSK)
Received: from IT1 (unknown [192.168.200.53])
	by ns.tjc.ru (Postfix) with ESMTP	for <freebsd-hackers@freebsd.org>;
	Thu, 13 Jan 2005 19:32:49 +0300 (MSK)
Date: Thu, 13 Jan 2005 19:31:57 +0300
From: Vyacheslav Druzhinin <dvg_lab@mail.ru>
X-Mailer: The Bat! (v3.0.1.33) Professional
Organization: DVG_Lab
X-Priority: 3 (Normal)
Message-ID: <19310572854.20050113193157@mail.ru>
To: freebsd-hackers@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: by amavisd-new at tjcollection.ru
Subject: FreeBSD 5.3 and some stranges logging in /var/log/messages
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: Vyacheslav Druzhinin <dvg_lab@mail.ru>
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 13 Jan 2005 16:32:03 -0000

Hello freebsd-hackers,

I use FreeBSD 5.3-RELEASE-p4, builded with ipfw support
  options IPFIREWALL
  options IPFIREWALL_VERBOSE
  options IPDIVERT
  
  some times I see some strange messages in /var/log/messages, like
  this:
  
------ cut --------
Jan 12 10:01:30 ns kernel: v<ia xl111
Jan 12 10:01:30 ns kernel: 8>Jan 12 10:01:30 ns kernel: ipfw: 65100 Deny TCP 212.30.133.170:3564 212.30.133.146:349 out
via xl1
Jan 12 10:01:30 ns kernel: 4<6:330 11ou8>tJ
Jan 12 10:01:30 ns kernel: <an 12 11100>:0 v
Jan 12 10:01:30 ns kernel: <ia xl11
Jan 12 10:01:30 ns kernel: 18>1:30 ns kernel: ipfw: 65100 Deny TCP 212.30.133.170:3565 212.30.133.146:350 out via xl1
Jan 12 10:01:30 ns kernel: :3<37 ou1t 1v8i>a J
Jan 12 10:01:30 ns kernel: a<n 12 11100>:x
Jan 12 10:01:30 ns kernel: l<1
Jan 12 10:01:30 ns kernel: 118>01:30 ns kernel: ipfw: 65100 Deny TCP 212.30.133.170:3572 212.30.133.146:357 out via xl1
Jan 12 10:01:30 ns kernel: 3<38 ou1t1 8>vJ
Jan 12 10:01:30 ns kernel: <an 121 1100>:i
Jan 12 10:01:30 ns kernel: a< xl1
Jan 12 10:01:30 ns kernel: 118>01:30 ns kernel: ipfw: 65100 Deny TCP 212.30.133.170:3573 212.30.133.146:358 out via xl1
Jan 12 10:01:30 ns kernel: 2.<30.133.1701:130>5
Jan 12 10:01:30 ns kernel: <ipfw: 118>34 212.3
Jan 12 10:01:30 ns kernel: 0<.133.14116:0>316
Jan 12 10:01:30 ns kernel: 51<00 D1e1n8>y9
Jan 12 10:01:30 ns kernel: < out v11ia0 >xl 
Jan 12 10:01:30 ns kernel: T<CP 21121.8>31
Jan 12 10:01:30 ns kernel: <
Jan 12 10:01:30 ns kernel: 110>0.133.170:3560 212.30.133.146:345 out via xl1
Jan 12 10:01:30 ns kernel: <1<10>ip1f1w8>:
Jan 12 10:01:30 ns kernel: <Jan 1121 0>10 
Jan 12 10:01:30 ns kernel: 5:
Jan 12 10:01:30 ns kernel: 0<1:30 ns11 k0>e1r
Jan 12 10:01:30 ns kernel: 0<0 Den11y 8T>n
Jan 12 10:01:30 ns kernel: <el: ip1f10w:> C
Jan 12 10:01:30 ns kernel: P< 212.130.181>36
Jan 12 10:01:30 ns kernel: 5<100 D11e0n>y3
Jan 12 10:01:30 ns kernel: .1<70:351691 821> 2T
Jan 12 10:01:30 ns kernel: <CP 21211.30>0
Jan 12 10:01:30 ns kernel: <.30.111383.>14.1
Jan 12 10:01:30 ns kernel: <33.17110:03>546:
Jan 12 10:01:30 ns kernel: <354 ou11t 8vi>a 2 
Jan 12 10:01:30 ns kernel: <212.30.11130>3
Jan 12 10:01:30 ns kernel: <xl1
Jan 12 10:01:30 ns kernel: 118>.146:327 out via xl1
Jan 12 10:01:30 ns kernel: 57<6 212.3101.8>1J
Jan 12 10:01:30 ns kernel: <an 12 11100>:
Jan 12 10:01:30 ns kernel: <33.14116:8>30
Jan 12 10:01:30 ns kernel: <1:30 n11s 0>k
Jan 12 10:01:30 ns kernel: <61 ou1t1 8>ve
Jan 12 10:01:30 ns kernel: <rnel: 11ip0>f
Jan 12 10:01:30 ns kernel: <ia xl1118
------ cut --------

The ipfw have been configured to log in to /var/log/security (standart
/etc/syslog.conf), but some times (I can't determine why it's happen
to) ipfw begins post some damaged messages in /var/log/messages. Why
messages damaged and why its posted to /var/log/messages?

Is it possible 5.3 bug?
  

With best regards,                  [MCP, MCSD]
Vyacheslav                          mailto:dvg_lab@mail.ru
Origin: <--=<< DVG_Lab >>=-->       Fido: 2:5085/20.0