tracking down the cause of an entry in syslog?
I've been getting an irritating recurring syslog entry that I'd like to
track down and stifle, but I'm at a loss as to discover what process is
causing the entry.
The entry is (from logcheck output) this:
Jun 22 16:02:02 ICMP message type destination unreachable - bad port from 127.0.0.1 (127.0.0.1->127.0.0.1)
Jun 22 16:12:37 ICMP message type destination unreachable - bad port from 127.0.0.1 (127.0.0.1->127.0.0.1)
Jun 22 16:12:38 ICMP message type destination unreachable - bad port from 127.0.0.1 (127.0.0.1->127.0.0.1)
sorry about the no wrap on the quote.
There are no other events being logged at identical times, or at similar
times with identical frequencies in any of my logs.
Does anyone have advice on how to track down the cause?
How can I log (or discover) which port is being sought?
Is there any way to do this without un-installing individual packages
until the entry ceases to be made?
If methodically un-installining packages is the only or most logical
method of tracking this, then does anyone have a good guess at where to
What docs will help me to figure this one out? (I've RTFM, but may have
looked in the wrong place.)
Thanks in advance.
Paul T. Wright <firstname.lastname@example.org>
-currently seeking employment-