Jonathan wrote:
I was looking at the log and came across several lines like this, could some one please tell me what they mean.
kernel: packet log input ACCEPT eth1 PROTO=6 209.214.177.19:1111 <my etho>:80 L=48 S=0x00 I=7174 F=0x4000 T=107 SYN (#24)
^^ This means that someone was connecting to your port number 80, which is where Apache lives. Assuming you don't have any other lines to different ports, it just means that people were connecting to your Apache web server. If other lines have that 80 replaced by other numbers, then I would be more worried, but there doesn't seem to be a problem here.
then I have a few lines at the end like kernel: martian source a4060a18 for 0afa04a6, dev eth0 kernel: ll header: ff ff ff ff ff ff 00 e0 29 46 64 5d 08 06
ANY help/insight to this would be greatly appreciated. TIA
I am using IPCHAINS, SuSE6.3, kernel 2.2.13, Apache (for my daughters website)
This is why you are getting those messages - someone is accessing your daughter's website. IMHO, if you are running a web server on your computer then I would turn off packet logging for port 80, otherwise you'll be flooded by these messages as millions of people visit your daughter's site... Hope that helps, Chris -- __ _ -o)/ / (_)__ __ ____ __ Chris Reeves /\\ /__/ / _ \/ // /\ \/ / ICQ# 22219005 _\_v __/_/_//_/\_,_/ /_/\_\ -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/