[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

AW: what's the error?



Viljo,

actually I can´t help with the error you posted.
But to complete the collection here´s an error that I see frequently on the
external interfaces of our routers.

Suspect short first fragment.
eth0 PROTO=6 213.13.177.121:0 217.29.8.82:0 L=20 S=0x00 I=63073 F=0x6000
T=102 (#0)

They do not harm the system, they just pop up in syslog once in a while.
I traced that IP-adress and found it´s some web-server in Portugal.

Actually I didn´t have the time to look that up, but I think there are a few
of those "ethernet" abnormalities that can be disabled either in the kernel
or in a firewall script.

Thanks
Michael

-----Ursprüngliche Nachricht-----
Von: Viljo Marrandi [mailto:viljo@inspiral.net]
Gesendet: Donnerstag, 9. August 2001 18:06
An: debian-security@lists.debian.org
Betreff: what's the error?


Hello,

I'm not sure this is aan security issue, but i could be exploitable...
>From time to time one of my nic's just dies and in /var/log/messages i
have stuff like this:

Aug  9 16:08:59 server kernel: eth1: Oversized Ethernet frame c7f9f460 vs
c7f9f460.
Aug  9 16:08:59 server kernel: eth1: Oversized Ethernet frame spanned
multiple buffers, entry 0xe852607 length 1546 status 60a8d00!
Aug  9 16:08:59 server kernel: eth1: Oversized Ethernet frame c7f9f470 vs
c7f9f470.
Aug  9 16:09:03 server kernel: eth1: Oversized Ethernet frame spanned
multiple buffers, entry 0xe852707 length 0 status 0600!
Aug  9 16:09:03 server kernel: eth1: Oversized Ethernet frame c7f9f470 vs
c7f9f470.
Aug  9 16:09:03 server kernel: eth1: Oversized Ethernet frame spanned
multiple buffers, entry 0xe852708 length 1546 status 60a8d00!
A

eth1 is external nic which is connected to adsl router. Both cards are
D-Link DFE-530's. I tried to swap them but no luck, still eth1 (before was
eth0) died. Anyone sends oversized packets to cause this or what? Or maybe
adsl box and nic hate each other?

Rgds,
Viljo


--
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact
listmaster@lists.debian.org



Reply to: