Results 1 to 4 of 4

Thread: ufw error message twice a minute -means?

  1. #1
    Join Date
    Sep 2011
    Beans
    615

    ufw error message twice a minute -means?

    Running Trusty with plain Openbox as DE (like a stripped down Lubuntu), 64 bit.

    ufw is logging messages that repeat twice each minute like this (some substrings substitued as indicated because I'm not clear what part of this output is potentially sensitive):

    I've broken this up with line feeds that aren't in the original to make it easier to read:
    Code:
    Dec 23 15:22:10 m kernel:
    [5_digits_different_each_repetition.6_digits_different_each_repetition]
    [UFW BLOCK] IN=eth0 OUT=
    MAC=alphanumeric_string_with_a_colon_as_every_third_character
    SRC=numerals_and_decimals_looks_like_an_ip_address
    DST=224.0.0.1 LEN=32  TOS=0x00 PREC=0x00
    TTL=1 ID=5_digit_string PROTO=2
    Or here it is in the original form:
    Code:
    Dec 23 15:22:10 m kernel:  [5_digits_different_each_repetition.6_digits_different_each_repetition]  [UFW BLOCK] IN=eth0 OUT=  MAC=alphanumeric_string_with_a_colon_as_every_third_character  SRC=numerals_and_decimals_looks_like_an_ip_address DST=224.0.0.1 LEN=32  TOS=0x00 PREC=0x00 TTL=1 ID=5_digit_string PROTO=2
    The interval between time stamps at the beginning of the repeated sequence
    alternates between 26 and 34 seconds resulting in entries alternating between
    10 and 36 seconds after the minute.

    My ufw status:

    Code:
    me@m:~$ sudo ufw status verbose
    Status: active
    Logging: on (low)
    Default: deny (incoming), allow (outgoing), disabled (routed)
    New profiles: skip
    me@m:~$
    This stops when I physically disconnect from the internet but resumes when I reconnect. So what does this mean? Is it a security concern?

    Thanks for any thoughts you can share.

    Best wishes to all for 2015.

  2. #2
    Join Date
    Feb 2011
    Location
    Coquitlam, B.C. Canada
    Beans
    3,521
    Distro
    Ubuntu Development Release

    Re: ufw error message twice a minute -means?

    It is nothing to worry about. Something is looking for all multicast capable hosts on the network.
    see also: http://tldp.org/HOWTO/Multicast-HOWTO-2.html ; http://ubuntuforums.org/showthread.p...light=224.0.0. ; http://ubuntuforums.org/showthread.php?t=1886913
    Any follow-up information on your issue would be appreciated. Please have the courtesy to report back.

  3. #3
    Join Date
    Sep 2011
    Beans
    615

    Re: ufw error message twice a minute -means?

    Thanks. That at least gives me a good place to start reading. I'll have to understand this a little better before I'm comfortable with it. If nothing else, it looks like something is wasting resources failing at the same task over and over again.

  4. #4
    Join Date
    Nov 2007
    Location
    London, England
    Beans
    7,701

    Re: ufw error message twice a minute -means?

    IP protocol 2 is IGMP - Internet Group Management Protocol.
    I guess your router is periodically asking if there are any boxes on the network who are interested in receiving multicast streams.
    I think this is pretty normal part of the background babble you see on a LAN.

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •