[PLUG] What does this log message mean?

drew wymore drew.wymore at gmail.com
Thu Jun 1 18:27:52 UTC 2006


It was a response from 64.5.35.225 to your machine based on a request to
port 80 to 64.5.35.225 .. the destination port 4766 wasn't blocked since
there was probably a NAT route entry for this outbound request so it let the
response come back inbound to the machine that requested it.

Drew-

On 6/1/06, J B <plug201 at jblack.org> wrote:
>
> Can someone tell me what this message means?
> I got it out of the dmesg command.
>
> ABORTED IN=eth0 OUT= MAC=00:0c:6e:a7:e5:66:00:0f:3d:4a:e2:d2:08:00
> SRC=64.5.35.225 DST=192.168.0.100 LEN=40 TOS=0x00 PREC=0x20 TTL=113
> ID=49779 DF PROTO=TCP SPT=80 DPT=4766 SEQ=3349389583 ACK=90362985
> WINDOW=0 RES=0x00 ACK RST URGP=0
>
> I recognize :
> eth0 (my ethernet interface)
> 192.168.0.100 (my LAN address)
>
> $ whois 64.5.35.225
>
> OrgName:    ThePlanet.com Internet Services, Inc.
> OrgID:      TPCM
> Address:    1333 North Stemmons Freeway
> Address:    Suite 110
> City:       Dallas
> StateProv:  TX
> PostalCode: 75207
> Country:    US
>
> If this is from outside my LAN, why isn't my D-Link router blocking it?
>
> Thank you.
> - TSloth
>
> _______________________________________________
> PLUG mailing list
> PLUG at lists.pdxlinux.org
> http://lists.pdxlinux.org/mailman/listinfo/plug
>



More information about the PLUG mailing list