[prev in list] [next in list] [prev in thread] [next in thread]
List: ipfilter
Subject: OOW packets
From: "Olmsted, Brian" <Brian.Olmsted () allstream ! com>
Date: 2005-11-28 3:08:40
Message-ID: F0A5661C0654E141B2BA417705F2B27817DD4F56 () TOREX006 ! att-intra ! com
[Download RAW message or body]
Any idea why I get these?
root@infov2# cat /var/log/ipfilter.log
Nov 28 02:53:34 infov2 ipmon[143]: [ID 702911 local0.notice]
02:53:34.432134 qfe0 @101:4 p 10.206.31.6,54779 -> 10.207.7.18,22 PR tcp
len 20 48 -S K-S IN
Nov 28 02:53:41 infov2 ipmon[143]: [ID 702911 local0.warning]
02:53:41.105803 qfe0 @101:49 b 10.207.7.5,111 -> 10.207.7.18,32782 PR
udp len 20 56 IN
Nov 28 02:53:41 infov2 ipmon[143]: [ID 702911 local0.warning]
02:53:41.144895 qfe0 @101:49 b 10.207.7.5,2049 -> 10.207.7.18,1023 PR
tcp len 20 40 -A IN OOW
Nov 28 02:53:44 infov2 ipmon[143]: [ID 702911 local0.warning]
02:53:44.510466 qfe0 @101:49 b 10.207.7.5,2049 -> 10.207.7.18,1023 PR
tcp len 20 40 -A IN OOW
Nov 28 02:53:51 infov2 ipmon[143]: [ID 702911 local0.warning]
02:53:51.260478 qfe0 @101:49 b 10.207.7.5,2049 -> 10.207.7.18,1023 PR
tcp len 20 40 -A IN OOW
Nov 28 02:53:56 infov2 ipmon[143]: [ID 702911 local0.warning]
02:53:56.110661 qfe0 @101:49 b 10.207.7.5,111 -> 10.207.7.18,32782 PR
udp len 20 56 IN
Nov 28 02:54:04 infov2 ipmon[143]: [ID 702911 local0.warning]
02:54:04.760549 qfe0 @101:49 b 10.207.7.5,2049 -> 10.207.7.18,1023 PR
tcp len 20 40 -A IN OOW
Nov 28 02:54:25 infov2 ipmon[143]: [ID 702911 local0.notice]
02:54:25.201265 qfe0 @101:4 p 10.206.31.6,54780 -> 10.207.7.18,22 PR tcp
len 20 48 -S K-S IN
Nov 28 02:54:26 infov2 ipmon[143]: [ID 702911 local0.warning]
02:54:26.120527 qfe0 @101:49 b 10.207.7.5,111 -> 10.207.7.18,32782 PR
udp len 20 56 IN
Nov 28 02:54:31 infov2 ipmon[143]: [ID 702911 local0.warning]
02:54:31.760578 qfe0 @101:49 b 10.207.7.5,2049 -> 10.207.7.18,1023 PR
tcp len 20 40 -A IN OOW
Nov 28 02:54:34 infov2 ipmon[143]: [ID 702911 local0.notice]
02:54:34.054719 qfe0 @101:4 p 10.206.31.6,54781 -> 10.207.7.18,22 PR tcp
len 20 48 -S K-S IN
Nov 28 02:54:41 infov2 ipmon[143]: [ID 702911 local0.warning]
02:54:41.111589 qfe0 @101:49 b 10.207.7.5,111 -> 10.207.7.18,32792 PR
udp len 20 56 IN
Nov 28 02:54:41 infov2 ipmon[143]: [ID 702911 local0.warning]
02:54:41.140716 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:54:44 infov2 ipmon[143]: [ID 702911 local0.warning]
02:54:44.510191 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:54:51 infov2 ipmon[143]: [ID 702911 local0.warning]
02:54:51.260207 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:54:56 infov2 ipmon[143]: [ID 702911 local0.warning]
02:54:56.120565 qfe0 @101:49 b 10.207.7.5,111 -> 10.207.7.18,32792 PR
udp len 20 56 IN
Nov 28 02:55:04 infov2 ipmon[143]: [ID 702911 local0.warning]
02:55:04.761793 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:55:26 infov2 ipmon[143]: [ID 702911 local0.warning]
02:55:26.132478 qfe0 @101:49 b 10.207.7.5,111 -> 10.207.7.18,32792 PR
udp len 20 56 IN
Nov 28 02:55:31 infov2 ipmon[143]: [ID 702911 local0.warning]
02:55:31.760223 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:55:41 infov2 ipmon[143]: [ID 702911 local0.warning]
02:55:41.140418 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:55:41 infov2 ipmon[143]: [ID 702911 local0.warning]
02:55:41.365670 qfe0 @101:49 b 10.207.7.5,111 -> 10.207.7.18,32796 PR
udp len 20 56 IN
Nov 28 02:55:44 infov2 ipmon[143]: [ID 702911 local0.warning]
02:55:44.510195 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:55:51 infov2 ipmon[143]: [ID 702911 local0.warning]
02:55:51.260245 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:55:56 infov2 ipmon[143]: [ID 702911 local0.warning]
02:55:56.370463 qfe0 @101:49 b 10.207.7.5,111 -> 10.207.7.18,32796 PR
udp len 20 56 IN
Nov 28 02:56:04 infov2 ipmon[143]: [ID 702911 local0.warning]
02:56:04.761642 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:56:26 infov2 ipmon[143]: [ID 702911 local0.warning]
02:56:26.380598 qfe0 @101:49 b 10.207.7.5,111 -> 10.207.7.18,32796 PR
udp len 20 56 IN
Nov 28 02:56:31 infov2 ipmon[143]: [ID 702911 local0.warning]
02:56:31.730287 qfe0 @101:49 b 10.207.7.5,2049 -> 10.207.7.18,1023 PR
tcp len 20 40 -AF IN OOW
Nov 28 02:56:31 infov2 ipmon[143]: [ID 702911 local0.warning]
02:56:31.760261 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:56:32 infov2 ipmon[143]: [ID 702911 local0.warning]
02:56:32.134137 qfe0 @101:49 b 10.207.7.5,2049 -> 10.207.7.18,1023 PR
tcp len 20 40 -AF IN OOW
Nov 28 02:56:33 infov2 ipmon[143]: [ID 702911 local0.warning]
02:56:32.934032 qfe0 @101:49 b 10.207.7.5,2049 -> 10.207.7.18,1023 PR
tcp len 20 40 -AF IN OOW
Nov 28 02:56:34 infov2 ipmon[143]: [ID 702911 local0.warning]
02:56:34.535870 qfe0 @101:49 b 10.207.7.5,2049 -> 10.207.7.18,1023 PR
tcp len 20 40 -AF IN OOW
Nov 28 02:56:37 infov2 ipmon[143]: [ID 702911 local0.warning]
02:56:37.727531 qfe0 @101:49 b 10.207.7.5,2049 -> 10.207.7.18,1023 PR
tcp len 20 40 -AF IN OOW
Nov 28 02:56:41 infov2 ipmon[143]: [ID 702911 local0.warning]
02:56:41.140493 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:56:41 infov2 ipmon[143]: [ID 702911 local0.warning]
02:56:41.371533 qfe0 @101:49 b 10.207.7.5,111 -> 10.207.7.18,32799 PR
udp len 20 56 IN
Nov 28 02:56:44 infov2 ipmon[143]: [ID 702911 local0.warning]
02:56:44.129916 qfe0 @101:49 b 10.207.7.5,2049 -> 10.207.7.18,1023 PR
tcp len 20 40 -AF IN OOW
Nov 28 02:56:44 infov2 ipmon[143]: [ID 702911 local0.warning]
02:56:44.510219 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:56:51 infov2 ipmon[143]: [ID 702911 local0.warning]
02:56:51.260252 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:56:56 infov2 ipmon[143]: [ID 702911 local0.warning]
02:56:56.380515 qfe0 @101:49 b 10.207.7.5,111 -> 10.207.7.18,32799 PR
udp len 20 56 IN
Nov 28 02:56:57 infov2 ipmon[143]: [ID 702911 local0.warning]
02:56:56.933412 qfe0 @101:49 b 10.207.7.5,2049 -> 10.207.7.18,1023 PR
tcp len 20 40 -AF IN OOW
Nov 28 02:57:04 infov2 ipmon[143]: [ID 702911 local0.warning]
02:57:04.761632 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:57:23 infov2 ipmon[143]: [ID 702911 local0.warning]
02:57:23.021562 qfe0 @101:49 b 10.207.7.5,2049 -> 10.207.7.18,1023 PR
tcp len 20 40 -AF IN OOW
Nov 28 02:57:32 infov2 ipmon[143]: [ID 702911 local0.warning]
02:57:32.248066 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:57:42 infov2 ipmon[143]: [ID 702911 local0.warning]
02:57:41.628336 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:57:45 infov2 ipmon[143]: [ID 702911 local0.warning]
02:57:44.998036 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:57:49 infov2 ipmon[143]: [ID 702911 local0.warning]
02:57:48.620615 qfe0 @101:49 b 10.207.7.5,2049 -> 10.207.7.18,1023 PR
tcp len 20 40 -AF IN OOW
Nov 28 02:57:52 infov2 ipmon[143]: [ID 702911 local0.warning]
02:57:51.748031 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:58:05 infov2 ipmon[143]: [ID 702911 local0.warning]
02:58:05.249316 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:58:14 infov2 ipmon[143]: [ID 702911 local0.warning]
02:58:14.219711 qfe0 @101:49 b 10.207.7.5,2049 -> 10.207.7.18,1023 PR
tcp len 20 40 -AF IN OOW
Nov 28 02:58:32 infov2 ipmon[143]: [ID 702911 local0.warning]
02:58:32.248006 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:58:40 infov2 ipmon[143]: [ID 702911 local0.warning]
02:58:39.818835 qfe0 @101:49 b 10.207.7.5,2049 -> 10.207.7.18,1023 PR
tcp len 20 40 -AF IN OOW
Nov 28 02:58:42 infov2 ipmon[143]: [ID 702911 local0.warning]
02:58:41.628199 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:58:45 infov2 ipmon[143]: [ID 702911 local0.warning]
02:58:44.997956 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:58:52 infov2 ipmon[143]: [ID 702911 local0.warning]
02:58:51.747992 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:58:56 infov2 ipmon[143]: [ID 702911 local0.notice]
02:58:55.640548 qfe0 @101:4 p 10.206.31.6,54782 -> 10.207.7.18,22 PR tcp
len 20 48 -S K-S IN
Nov 28 02:59:05 infov2 ipmon[143]: [ID 702911 local0.warning]
02:59:05.249248 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:59:06 infov2 ipmon[143]: [ID 702911 local0.warning]
02:59:05.420835 qfe0 @101:49 b 10.207.7.5,2049 -> 10.207.7.18,1023 PR
tcp len 20 40 -AF IN OOW
Nov 28 02:59:31 infov2 ipmon[143]: [ID 702911 local0.warning]
02:59:31.017050 qfe0 @101:49 b 10.207.7.5,2049 -> 10.207.7.18,1023 PR
tcp len 20 40 -AF IN OOW
Nov 28 02:59:32 infov2 ipmon[143]: [ID 702911 local0.warning]
02:59:32.247882 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:59:42 infov2 ipmon[143]: [ID 702911 local0.warning]
02:59:41.628141 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:59:45 infov2 ipmon[143]: [ID 702911 local0.warning]
02:59:44.997866 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:59:52 infov2 ipmon[143]: [ID 702911 local0.warning]
02:59:51.747913 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 02:59:57 infov2 ipmon[143]: [ID 702911 local0.warning]
02:59:56.616196 qfe0 @101:49 b 10.207.7.5,2049 -> 10.207.7.18,1023 PR
tcp len 20 40 -AR IN OOW
Nov 28 03:00:05 infov2 ipmon[143]: [ID 702911 local0.warning]
03:00:05.253874 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 03:00:32 infov2 ipmon[143]: [ID 702911 local0.warning]
03:00:32.247879 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 03:00:42 infov2 ipmon[143]: [ID 702911 local0.warning]
03:00:41.627992 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 03:00:45 infov2 ipmon[143]: [ID 702911 local0.warning]
03:00:44.997825 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 03:00:52 infov2 ipmon[143]: [ID 702911 local0.warning]
03:00:51.747834 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 03:01:05 infov2 ipmon[143]: [ID 702911 local0.warning]
03:01:05.249153 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 03:01:32 infov2 ipmon[143]: [ID 702911 local0.warning]
03:01:32.183503 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 03:01:42 infov2 ipmon[143]: [ID 702911 local0.warning]
03:01:41.563677 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 03:01:45 infov2 ipmon[143]: [ID 702911 local0.warning]
03:01:44.933421 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 03:01:52 infov2 ipmon[143]: [ID 702911 local0.warning]
03:01:51.683437 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 03:02:05 infov2 ipmon[143]: [ID 702911 local0.warning]
03:02:05.184697 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 03:02:08 infov2 ipmon[143]: [ID 702911 local0.warning]
03:02:07.476281 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 03:02:11 infov2 ipmon[143]: [ID 702911 local0.warning]
03:02:10.843395 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 03:02:18 infov2 ipmon[143]: [ID 702911 local0.warning]
03:02:17.593367 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
Nov 28 03:02:31 infov2 ipmon[143]: [ID 702911 local0.warning]
03:02:31.093523 qfe0 @102:53 b 10.207.7.18,1023 -> 10.207.7.5,2049 PR
tcp len 20 48 -S OUT OOW
root@infov2#
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic