DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

Syslog errors BUT WHY?

  • robster
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
12 Sep 2011 12:51 #69319 by robster
Syslog errors BUT WHY? was created by robster
Hi

I have Syslog on my 2830n routed to my Synology NAS and have a Syslog management tool on this NAS.

I keep getting these ALert messages :-


[DOS][Block][tcp_flag, scanner=fin_wo_ack][192.168.2.106:59630->17.250.248.161:443][TCP][HLen=20, TLen=52, Flag=F, Seq=1919881441, Ack=0, Win=65535]


Checking this particular IP address traces it back to Apple and as all my computers are Apple this is not a real surprise but WHY is it creating this particular response from my Draytek?

Robin

Please Log in or Create an account to join the conversation.

More
15 Sep 2011 13:30 #69396 by thrain
Replied by thrain on topic Re: Syslog errors BUT WHY?
Try running nettop on your Mac, I saw the following the other day :-

http://hints.macworld.com/article.php?story=20110906200849542&query=nettop

Please Log in or Create an account to join the conversation.

More
26 Sep 2011 10:23 #69491 by frag
Replied by frag on topic Re: Syslog errors BUT WHY?
buy a windows PC

Please Log in or Create an account to join the conversation.

  • robster
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
26 Sep 2011 10:29 #69492 by robster
Replied by robster on topic Re: Syslog errors BUT WHY?
Now why would I want to make such a huge retrograde step as that! :D

Please Log in or Create an account to join the conversation.

More
26 Sep 2011 11:31 #69493 by damienf
Replied by damienf on topic Re: Syslog errors BUT WHY?

Please Log in or Create an account to join the conversation.

  • robster
  • Topic Author
  • Offline
  • Junior Member
  • Junior Member
More
26 Sep 2011 12:02 #69499 by robster
Replied by robster on topic Re: Syslog errors BUT WHY?
Okay

So that one sounds like a bug.

The following is actually the most common error message i get, I ASSUME this is a Trace Route attempt which the Vigor is blocking, am I correct?

Host: '192.168.2.1', IP: '192.168.2.1', Level: 'alert', Date: '2011-09-26', Time: '11:50:49', Program: 'Vigor2830n', Message: '[DOS][Block][trace_route][204.14.232.174:12852->81.156.185.235:33437][UDP][HLen=20, TLen=32]'

Robin

Please Log in or Create an account to join the conversation.

Moderators: ChrisSami