From owner-freebsd-questions@FreeBSD.ORG Wed Apr 28 16:50:24 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 60F07106566B for ; Wed, 28 Apr 2010 16:50:24 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from asmtpout025.mac.com (asmtpout025.mac.com [17.148.16.100]) by mx1.freebsd.org (Postfix) with ESMTP id 4CC048FC13 for ; Wed, 28 Apr 2010 16:50:24 +0000 (UTC) MIME-version: 1.0 Content-transfer-encoding: 7BIT Content-type: text/plain; charset=us-ascii Received: from cswiger1.apple.com ([17.209.4.71]) by asmtp025.mac.com (Sun Java(tm) System Messaging Server 6.3-8.01 (built Dec 16 2008; 32bit)) with ESMTPSA id <0L1L00C03IRZUT00@asmtp025.mac.com> for freebsd-questions@freebsd.org; Wed, 28 Apr 2010 09:50:23 -0700 (PDT) X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 ipscore=0 phishscore=0 bulkscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx engine=5.0.0-0908210000 definitions=main-1004280128 From: Chuck Swiger In-reply-to: <20100428123425.706d6e51@scorpio.seibercom.net> Date: Wed, 28 Apr 2010 09:50:22 -0700 Message-id: References: <20100428123425.706d6e51@scorpio.seibercom.net> To: freebsd-questions@freebsd.org X-Mailer: Apple Mail (2.1078) Subject: Re: Unknown IPFW log message X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Apr 2010 16:50:24 -0000 On Apr 28, 2010, at 9:34 AM, Jerry wrote: > In the security.log, I have been noticing the following: > > Apr 28 12:04:20 scorpio kernel: ipfw: 4400 Deny P:2 192.168.1.1 224.0.0.1 in via nfe0 > > I have not been able to document what the "P:2" stands for. It's coming from /usr/src/sys/netinet/ip_fw2.c around line 1000; "P:2" indicates the packet was using IP protocol 2, aka IPPROTO_IGMP. IGMP is most commonly used for streaming multimedia, some games, and I even think some types VPN connections like to use it.... Regards, -- -Chuck