Re: [pfSense Support] syslog messages

2011-08-26 Thread greg whynott
looks like you have a windows client that was unable to get an address from
your dhcp server and is sending out service discovery stuff..

but i could be wrong.  8)

-g




On Fri, Aug 26, 2011 at 11:56 AM, k_o_l k_...@hotmail.com wrote:

 My syslog server is being filled with the following generated by
 pfsense-2.0-RC3

 ** **

  
 *169.254.1.213*http://kb.monitorware.com/kbsearch.php?sa=whoisoid=iporigin=phplogconq=169.254.1.213.56971
  *169.254.1.255*http://kb.monitorware.com/kbsearch.php?sa=whoisoid=iporigin=phplogconq=169.254.1.255.5000:
 UDP, length 12

 ** **

 Any ideas?

 ** **

 Thanks,

 Sam Hammand

 ** **



RE: [pfSense Support] syslog messages

2011-08-26 Thread k_o_l
 

From: greg whynott [mailto:greg.whyn...@gmail.com] 
Sent: Friday, August 26, 2011 12:04 PM
To: support@pfsense.com
Subject: Re: [pfSense Support] syslog messages

 

looks like you have a windows client that was unable to get an address from
your dhcp server and is sending out service discovery stuff..

 

but i could be wrong.  8)

 

-g

 



 

On Fri, Aug 26, 2011 at 11:56 AM, k_o_l k_...@hotmail.com wrote:

My syslog server is being filled with the following generated by
pfsense-2.0-RC3

 

 
http://kb.monitorware.com/kbsearch.php?sa=whoisoid=iporigin=phplogconq=1
69.254.1.213 169.254.1.213.56971 
http://kb.monitorware.com/kbsearch.php?sa=whoisoid=iporigin=phplogconq=1
69.254.1.255 169.254.1.255.5000: UDP, length 12

 

Any ideas?

 

Thanks,

Sam Hammand

 



 

Unless I'm wrong it appears that the source is the firewall

 

 



Re: [pfSense Support] syslog messages

2011-08-26 Thread Chris Buechler
On Fri, Aug 26, 2011 at 11:56 AM, k_o_l k_...@hotmail.com wrote:
 My syslog server is being filled with the following generated by
 pfsense-2.0-RC3

  169.254.1.213.56971  169.254.1.255.5000: UDP, length 12


Some device on your LAN with that autoconfigured 169.254.1.213 (which,
unless that's your LAN subnet, means a machine that can't get a DHCP
lease) is sending out broadcast UDP 5000 traffic.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org