tracking down the cause of an entry in syslog?

[Paul Wright <paul@cvanet.com>]

Hi all,

I've been getting an irritating recurring syslog entry that I'd like to 
track down and stifle, but I'm at a loss as to discover what process is 
causing the entry.

The entry is (from logcheck output) this:

Jun 22 16:02:02 ICMP message type destination unreachable - bad port from 127.0.0.1 (127.0.0.1->127.0.0.1)
Jun 22 16:12:37 ICMP message type destination unreachable - bad port from 127.0.0.1 (127.0.0.1->127.0.0.1)
Jun 22 16:12:38 ICMP message type destination unreachable - bad port from 127.0.0.1 (127.0.0.1->127.0.0.1)

sorry about the no wrap on the quote.

There are no other events being logged at identical times, or at similar 
times with identical frequencies in any of my logs.

Does anyone have advice on how to track down the cause?

How can I log (or discover) which port is being sought?

Is there any way to do this without un-installing individual packages 
until the entry ceases to be made?

If methodically un-installining packages is the only or most logical 
method of tracking this, then does anyone have a good guess at where to 
start?

What docs will help me to figure this one out?  (I've RTFM, but may have 
looked in the wrong place.)

Thanks in advance.

--ptw


-- 
Paul T. Wright <paul@cvanet.com>
-currently seeking employment-