PDA

View Full Version : [SOLVED] unknown log entry

jmore9
October 29th, 2009, 08:00 AM
Hello !

I saw this in my kernel messages and wondering if it needs to be addressed or not ? Running Ubuntu 9.10rc.

Here is what i am concerned about :

Oct 29 06:49:39 jeff-desktop kernel: [ 6606.871874] Inbound IN=eth0 OUT= MAC=00:15:58:1b:3e:67:00:1b:11:68:2f:5b:08:00 SRC=71.205.112.1 DST=192.168.0.109 LEN=56 TOS=0x00 PREC=0x00 TTL=63 ID=12458 PROTO=ICMP TYPE=11 CODE=0 [SRC=192.168.0.109 DST=206.190.60.37 LEN=80 TOS=0x00 PREC=0x20 TTL=1 ID=10753 PROTO=UDP SPT=52802 DPT=33438 LEN=40 ]

Oct 29 06:49:39 jeff-desktop kernel: [ 6606.872046] Inbound IN=eth0 OUT= MAC=00:15:58:1b:3e:67:00:1b:11:68:2f:5b:08:00 SRC=71.205.112.1 DST=192.168.0.109 LEN=56 TOS=0x00 PREC=0x00 TTL=63 ID=12459 PROTO=ICMP TYPE=11 CODE=0 [SRC=192.168.0.109 DST=206.190.60.37 LEN=80 TOS=0x00 PREC=0x20 TTL=1 ID=10754 PROTO=UDP SPT=40313 DPT=33439 LEN=40 ]

Oct 29 06:49:39 jeff-desktop kernel: [ 6606.877313] Inbound IN=eth0 OUT= MAC=00:15:58:1b:3e:67:00:1b:11:68:2f:5b:08:00 SRC=68.87.191.217 DST=192.168.0.109 LEN=56 TOS=0x00 PREC=0xC0 TTL=252 ID=39781 PROTO=ICMP TYPE=11 CODE=0 [SRC=192.168.0.109 DST=206.190.60.37 LEN=60 TOS=0x00 PREC=0x20 TTL=1 ID=10758 PROTO=UDP SPT=50148 DPT=33443 LEN=40 ]

Oct 29 06:49:39 jeff-desktop kernel: [ 6606.877433] Inbound IN=eth0 OUT= MAC=00:15:58:1b:3e:67:00:1b:11:68:2f:5b:08:00 SRC=68.87.191.217 DST=192.168.0.109 LEN=56 TOS=0x00 PREC=0xC0 TTL=252 ID=39782 PROTO=ICMP TYPE=11 CODE=0 [SRC=192.168.0.109 DST=206.190.60.37 LEN=60 TOS=0x00 PREC=0x20 TTL=1 ID=10759 PROTO=UDP SPT=33768 DPT=33444 LEN=40 ]

Oct 29 06:49:39 jeff-desktop kernel: [ 6606.880975] Inbound IN=eth0 OUT= MAC=00:15:58:1b:3e:67:00:1b:11:68:2f:5b:08:00 SRC=68.87.191.217 DST=192.168.0.109 LEN=56 TOS=0x00 PREC=0xC0 TTL=252 ID=39783 PROTO=ICMP TYPE=11 CODE=0 [SRC=192.168.0.109 DST=206.190.60.37 LEN=60 TOS=0x00 PREC=0x20 TTL=1 ID=10760 PROTO=UDP SPT=48510 DPT=33445 LEN=40 ]

Oct 29 06:49:44 jeff-desktop kernel: [ 6612.028104] Inbound IN=eth0 OUT= MAC=00:15:58:1b:3e:67:00:1b:11:68:2f:5b:08:00 SRC=63.243.149.113 DST=192.168.0.109 LEN=56 TOS=0x00 PREC=0x20 TTL=247 ID=0 PROTO=ICMP TYPE=11 CODE=0 [SRC=192.168.0.109 DST=206.190.60.37 LEN=60 TOS=0x00 PREC=0x20 TTL=1 ID=10773 PROTO=UDP SPT=52726 DPT=33458 LEN=40 ] ]

Oct 29 06:49:44 jeff-desktop kernel: [ 6612.028273] Inbound IN=eth0 OUT= MAC=00:15:58:1b:3e:67:00:1b:11:68:2f:5b:08:00 SRC=63.243.149.113 DST=192.168.0.109 LEN=56 TOS=0x00 PREC=0x20 TTL=247 ID=0 PROTO=ICMP TYPE=11 CODE=0 [SRC=192.168.0.109 DST=206.190.60.37 LEN=60 TOS=0x00 PREC=0x20 TTL=1 ID=10775 PROTO=UDP SPT=41528 DPT=33460 LEN=40 ]

Oct 29 06:49:44 jeff-desktop kernel: [ 6612.028442] Inbound IN=eth0 OUT= MAC=00:15:58:1b:3e:67:00:1b:11:68:2f:5b:08:00 SRC=209.58.27.54 DST=192.168.0.109 LEN=56 TOS=0x00 PREC=0x20 TTL=245 ID=0 PROTO=ICMP TYPE=11 CODE=0 [SRC=192.168.0.109 DST=206.190.60.37 LEN=60 TOS=0x00 PREC=0x20 TTL=1 ID=10777 PROTO=UDP SPT=39938 DPT=33462 LEN=40 ]

Oct 29 06:49:44 jeff-desktop kernel: [ 6612.028617] Inbound IN=eth0 OUT= MAC=00:15:58:1b:3e:67:00:1b:11:68:2f:5b:08:00 SRC=209.58.27.54 DST=192.168.0.109 LEN=56 TOS=0x00 PREC=0x20 TTL=245 ID=0 PROTO=ICMP TYPE=11 CODE=0 [SRC=192.168.0.109 DST=206.190.60.37 LEN=60 TOS=0x00 PREC=0x20 TTL=1 ID=10778 PROTO=UDP SPT=45156 DPT=33463 LEN=40 ]

Oct 29 06:49:44 jeff-desktop kernel: [ 6612.031638] Inbound IN=eth0 OUT= MAC=00:15:58:1b:3e:67:00:1b:11:68:2f:5b:08:00 SRC=216.115.102.178 DST=192.168.0.109 LEN=56 TOS=0x00 PREC=0x20 TTL=245 ID=0 PROTO=ICMP TYPE=11 CODE=0 [SRC=192.168.0.109 DST=206.190.60.37 LEN=60 TOS=0x00 PREC=0x20 TTL=1 ID=10779 PROTO=UDP SPT=45511 DPT=33464 LEN=40 ]

These are all inbounds, so i was wondering if i need to do anything or just ignore them. Maybe one of the ubuntu update sites ?
jmore9
October 29th, 2009, 08:27 AM
I figured it out with sudo netstat -anutp

i opened firefox to ubuntu forums and ran that command and came back with a number that was with the previous entry/post.

I then closed firefox and ran the same command and got time wait, So i would assume that that site is part of ubuntu forums network.