-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
This came up in our firewall:
Apr 24 08:48:01 <hostname> kernel: Packet log: unserved DENY eth0
PROTO=UDP 149.225.113.35:31790 xxx.xxx.xxx.xxx:31789 L=29:9 S=0x00
I=64598 T=115
What concerns me is both the destination port and the packet length.
I'm assuming that L=29:9 means 29 for the whole packet size, and 9 is
the UDP packet size. Take away the UDP header, leaves you 1? Am I
reading this correctly?
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com>
iQA/AwUBOQWdTPWPEBDMsfC4EQIuBgCeKxblsdJusAwOAvyZOqKiIKr7mHsAn0pO
1er8TOV2FYTt4ZdKsGTdRz/q
=Q7od
-----END PGP SIGNATURE-----
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
