Have you noticed any unusual scans on the portsentry??
Since you running firewall do you have antispoofing
enabled??
Do you deny any source 127.0.0.0 on you external interface??
Have you tried to analyze the traffic with a sniffer??
The Wolf
-----Original Message-----
From: Amir Aliabadi [
mailto:amir@aliabadi.com]
Sent: Monday, March 20, 2000 7:33 PM
To:
plug-discuss@lists.PLUG.phoenix.az.us
Subject: Re: Network Errors
> Are you offering services to the Internet??
Yes, ye basic www, telnet, ftp, mail
> Are you running a firewall??
Yes, ipchains
> Are you logging the connections??
No.
> Do you run Scan sensing software??
Portsentry
>
> This looks disturbing when your loopback interface has tcp errors on it.
That is what i don't understand...
> -----Original Message-----
> From: Amir Aliabadi [mailto:amir@aliabadi.com]
> Sent: Sunday, March 19, 2000 11:03 AM
> To: plug-discuss@lists.PLUG.phoenix.az.us
> Subject: Network Errors
>
>
> I recently noticed I was having a bunch of errors on my ethernet
interfaces.
> Any suggestions on where to start looking?
>
> eth0 is an internal network
> eth1 is plugged into the internet
> and lo is lo (why would I be getting errors on a loop back is kinda
> confusing)
>
> It seems like I started seeing this when I upgraded to 2.2.13 kernal. I
> should probably bump up to the latest....
>
> lo Link encap:Local Loopback
> inet addr:127.0.0.1 Bcast:127.255.255.255 Mask:255.0.0.0
> UP LOOPBACK RUNNING MTU:3924 Metric:1
> RX packets:389518 errors:0 dropped:0 overruns:0
> TX packets:0 errors:118988302 dropped:389518 overruns:0
>
> eth0 Link encap:Ethernet HWaddr 00:10:5B:27:08:62
> inet addr:192.168.1.1 Bcast:192.168.1.255 Mask:255.255.255.0
> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
> RX packets:1272091 errors:267 dropped:0 overruns:288
> TX packets:0 errors:1232085057 dropped:1423974 overruns:0
> Interrupt:10 Base address:0x300
>
> eth1 Link encap:Ethernet HWaddr 00:4F:4A:05:68:16
> inet addr:209.141.132.195 Bcast:209.141.132.255
> Mask:255.255.255.0
> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
> RX packets:1677197 errors:0 dropped:0 overruns:0
> TX packets:42 errors:182048567 dropped:1355452 overruns:62
> Interrupt:11 Base address:0x280
>
>
>
>
> _______________________________________________
> Plug-discuss mailing list - Plug-discuss@lists.PLUG.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>
> _______________________________________________
> Plug-discuss mailing list - Plug-discuss@lists.PLUG.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
_______________________________________________
Plug-discuss mailing list -
Plug-discuss@lists.PLUG.phoenix.az.us
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
(text/plain)