[Mageia-dev] Decoding iptables message

[Anne Wilson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Could someone please tell me what to look for, and where, to solve
this puzzle?

- --------------------- iptables firewall Begin ------------------------


 Listed by source hosts:
 Dropped 9 packets on interface eth0
   From 192.168.0.40 - 9 packets to tcp(38575)

 ---------------------- iptables firewall End -------------------------

The machine in question is my mail/file/print server, running a
secondary firewall inside the NAT router.  Port 38575 appears to be
unassigned, and I've only seen such messages for the last couple of days.

I'm pretty sure that the server hasn't been _directly_ used, i.e. with
login to actual physical box, during that time, so the likelihood
seems to be some service other systems on the LAN are calling for
something.

Any ideas about how to go about tracing this?  I can't find it in any
of the logs on the server.  I'm working on the logs on the laptops.

Anne
- -- 
Need KDE help? Try
http://userbase.kde.org or
http://forum.kde.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk/0I9cACgkQj93fyh4cnBe6dQCfQn3Mu6QskZ+SPfpwbPZqbmQ+
Hq4AnReyqpmjOaD6NSxpuOzsLtLieBIW
=QJRM
-----END PGP SIGNATURE-----