From owner-freebsd-stable Wed Aug 9 16:45:29 2000 Delivered-To: freebsd-stable@freebsd.org Received: from ns.itga.com.au (ns.itga.com.au [202.53.40.210]) by hub.freebsd.org (Postfix) with ESMTP id 3BB5B37B5FF for ; Wed, 9 Aug 2000 16:45:14 -0700 (PDT) (envelope-from gnb@itga.com.au) Received: from lightning.itga.com.au (lightning.itga.com.au [192.168.71.20]) by ns.itga.com.au (8.9.3/8.9.3) with ESMTP id JAA75270; Thu, 10 Aug 2000 09:45:04 +1000 (EST) (envelope-from gnb@itga.com.au) Received: from itga.com.au (lightning.itga.com.au [192.168.71.20]) by lightning.itga.com.au (8.9.3/8.9.3) with ESMTP id JAA16416; Thu, 10 Aug 2000 09:45:02 +1000 (EST) Message-Id: <200008092345.JAA16416@lightning.itga.com.au> X-Mailer: exmh version 2.0.1 12/23/97 From: Gregory Bond To: Doug White Cc: Brad Knowles , FreeBSD-STABLE Mailing List Subject: Re: Weird responses to queso on broadcast address... In-reply-to: Your message of Wed, 09 Aug 2000 12:22:57 -0700. Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Thu, 10 Aug 2000 09:45:02 +1000 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > You probably have the sysctl 'net.inet.tcp.log_in_vain' enabled so it logs > any connection attempts to nonexistent ports. I have this as well, and I get some very funny results. From our web cache, I get lots of messages like Aug 9 16:09:46 proxy /kernel: Connection attempt to TCP 202.53.40.211:3098 from 216.111.248.10:80 But at the same time, in the squid access log, the cache is making a connection to that IP/port to retrieve a web page. Similarly, I see lots of log_in_vain messages like this: Aug 9 16:21:02 ns /kernel: Connection attempt to UDP 192.168.128.49:3672 from 192.168.128.49:53 (i.e. named talking to another process on the same host). Something is very weird with the log_in_vain code (or, more seriously, the underlying IP stack) and, now that I have the proxy server up to 4.1-Stable, I'll attempt to investigate. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message