In reply to Martin Feeney's flatulent wordings,
> Does anyone else use IPPL (the IP Protocol logger)?
> I've been getting constant logs along the lines of:
>> ICMP message type destination unreachable - bad port from xxx (10.x.y.z)
>> I'm not hugely upset about it, but there's too many of them and it makes
> vgrepping the log files a bit more difficult.
>> RTFMing, RTFWPing and googleing tells me that a likely culprit is lack of
> an identd server - so I installed one and there was no change to the
> behaviour.
ICMP destination port unreachable is returned when you send a UDP packet to a
port that isn't listening. You'll have to work out from that what the
offending service is. If you find IPPL too unconfigurable or verbose, and you
use it purely for Intrusion Detection purposes, perhaps snort (www.snort.org)
would suit you better.
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!
