Re: Log spam: Limiting * response from 1 to 200 packets/sec

From: Michael Butler <imb_at_protected-networks.net>
Date: Tue, 13 Dec 2016 11:19:18 -0500
On 12/13/16 11:15, Gary Palmer wrote:
> On Tue, Dec 13, 2016 at 10:43:27AM -0500, Michael Butler wrote:
>> On 12/13/16 10:29, Dimitry Andric wrote:
>>
>>> Somebody is most likely port scanning your machines.  I see this all the
>>> time on boxes connected to the internet.
>>
>> As are mine. I wouldn't mind so much if the message contained sufficient
>> useful information that could be acted on, e.g. originating IP address
>> and, when appropriate, destination port.
>
> sysctl net.inet.tcp.log_in_vain=1
> sysctl net.inet.udp.log_in_vain=1
>
> be prepared for a lot of logs if you are being port scanned

Or, apparently, have a windoze box on that segment :-(

	Michael
Received on Tue Dec 13 2016 - 15:19:24 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:41:09 UTC