Alert MSSG in ADSL log

jbk jbk-SkCWf5sxpj0sV2N9l4h3zg at public.gmane.org
Sun Mar 8 09:35:50 EDT 2009


jbk wrote:
> I just bought and configured a Dlink 2540B DSL modem to 
> replace my Zoom X5. I am getting the following warning 
> message in the log and I am not sure what to make of it:
> 
> kernel: Intrusion -> IN=ppp_0_35_3 OUT= MAC= SRC=173.73.2.60 
> DST=63.209.236.25 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=5380 
> DF PROTO=TCP SPT=56551 DPT=42065 WINDOW=8192 RES=0x00 SYN URGP=0
> 

I would like to decipher the key lines in the above message. 
I think I know what some of them mean. The line beginning 
with OUT is the key element I would like to know.

kernel: Intrusion -> # This is the message header
IN=ppp_0_35_3 # This is connection config ID
OUT= MAC= SRC=173.73.2.60 # I don't know what this is
DST=63.209.236.25 # This is my ISP assigned address
# The following lines describe the data packet, its time to 
live in milliseconds etc...
LEN=48
TOS=0x00
PREC=0x00
TTL=113
ID=5380
DF PROTO=TCP
SPT=56551
DPT=42065
WINDOW=8192
RES=0x00
SYN URGP=0

Jim KR





More information about the Discuss mailing list