Howdy,

my FW-1 (running on a Sun Netra) just crashed completely. The last thing 
I saw in the FW-1 logs where a lot of messages like:

16:01:48 drop   xxxxxx >e3 proto ip service 65535 src 0.0.60.0 dst 0.0.255.255 h_len 
60 ip_vers 15 rule 0
16:01:48 drop   xxxxxx >e3 proto ip service 65535 src 0.0.255.255 dst 255.255.255.255 
s_port 65535 h_len 60 ip_vers 15 rule 0
16:01:48 drop   xxxxxx >e3 proto ip service 65535 src 0.0.128.136 dst 38.128.0.136 
h_len 60 ip_vers 15 rule 0
16:01:48 drop   xxxxxx >e3 proto ip service 65535 src 0.0.64.139 dst 38.128.192.138 
s_port 65535 h_len 60 ip_vers 15 rule 0
16:01:48 drop   xxxxxx >e3 proto ip service 65535 src 0.0.255.255 dst 255.255.72.0 
h_len 60 ip_vers 15 rule 0
...

In /var/adm/messages there are a lot of messages like:

May 19 15:24:57 xxxxxx unix: FW-1: packet size too big (65528) from 0xffff0000, 
ip_p=255
May 19 15:24:57 xxxxxx unix: FW-1: packet size too big (67323) from 0x268060e7, 
ip_p=128
May 19 15:24:57 xxxxxx unix: FW-1: packet size too big (73696) from 0xeea60000, 
ip_p=255
May 19 15:24:57 xxxxxx unix: FW-1: packet size too big (65528) from 0xffff0000, 
ip_p=255
May 19 15:24:57 xxxxxx unix: FW-1: packet size too big (73696) from 0xeea60000, 
ip_p=255
May 19 15:24:57 xxxxxx unix: FW-1: packet size too big (65528) from 0xffff0000, 
ip_p=255

Does anybody have any idea what might be going on?

Nico


--------------------------------------------------------
 "It has been said that there are only two businesses
  refer to customers as users: illegal drug trade and
               the computer industry." 
--------------------------------------------------------
Nico De Ranter
Sony Service Center (SDCE/DME-B)
Sint Stevens Woluwestraat 55 (Rue de Woluwe-Saint-Etienne)
1130 Brussel (Bruxelles), Belgium, Europe, Earth
Telephone: +32 2 724 86 41 Telefax: +32 2 726 26 86
e-mail: [EMAIL PROTECTED]


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to