On Sun, Mar 23, 2003 at 08:27:56PM -0500, Michael T. Davis wrote:
>
> Every so often, a message like this comes across our log:
>
> Mar 23 20:08:06 er6fw1 ipmon[14766]: 20:08:06.013918 2x fxp1 @0:71 b \
> 10.10.10.9,3947 -> 10.10.10.255,138 PR udp len 20 229 IN
>
> I'm pretty sure I narrowed this down to a printer which has yet to have a
> proper IP address assigned to it. That much is understandable. Almost
> immediately thereafter, though, the following kind of message is logged:
>
> Mar 23 20:08:06 er6fw1 ipmon[14766]: 20:08:06.018640 fxp1 @0:82 b \
> <sys-ip> -> 10.10.10.9 PR icmp len 20 56 icmp 3/0 for \
> 10.10.10.9,3947 - 10.10.10.255,138 PR udp len 20 63744 IN
>
> "<sys-ip>" is a "real" IP address on our subnet. Could someone "translate"
> this second log record?
ICMP type 3, code 0 is a "Destination unreachable, net unreachable"
message. Does it think it's a router?
--
Crist J. Clark | [EMAIL PROTECTED]
| [EMAIL PROTECTED]
http://people.freebsd.org/~cjc/ | [EMAIL PROTECTED]
