View Single Post
  #1   (View Single Post)  
Old 30th May 2010
kondziq kondziq is offline
New User
 
Join Date: Jun 2009
Posts: 9
Default wierd logs in pf

Hey guys,

I recently had that in my pf logs:
Code:
Code:
00:00:03.911759 rule 0/0(match): block in on rl1: 0.76.241.0 > 214.26.28.9: at-#96 5
00:00:00.000017 rule 0/0(match): block in on rl1: 0.76.242.0 > 214.26.128.9: at-#96 5
00:00:00.000356 rule 0/0(match): block in on rl1: 0.76.243.0 > 214.26.96.9: at-#96 5
00:00:00.000224 rule 0/0(match): block in on rl1: 0.76.115.0 > 209.26.226.9: at-#96 5
00:00:05.009093 rule 0/0(match): block in on rl1: 0.76.23.0 > 219.26.34.10: at-#96 5
00:00:00.000061 rule 0/0(match): block in on rl1: 0.76.242.0 > 214.26.128.9: at-#96 5
00:00:05.049854 rule 0/0(match): block in on rl1: 0.76.217.0 > 224.26.247.10: at-#96 5
00:00:00.000023 rule 0/0(match): block in on rl1: 0.76.242.0 > 214.26.128.9: at-#96 5
00:00:05.021413 rule 0/0(match): block in on rl1: 0.76.46.0 > 229.26.5.11: at-#96 5
00:00:00.000105 rule 0/0(match): block in on rl1: 0.76.242.0 > 214.26.128.9: at-#96 5
rl1 is my internal interface, so it looks as if those wierd packets were comming from inside the network. Any idea what that might be? Also how do I read that ': at-#96 5' part?

Thanks and regards,
K.
Reply With Quote