brent timothy saner on 13 May 2009 15:40:14 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] spurious packets?


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Eric wrote:
> I see the following line repeated in the /var/log/messages file of a Red Hat ES 
> 3 server:
> 
> May 13 04:06:58 mainserver kernel: 10.20.0.31 sent an invalid ICMP type 3,
> code 3 error to a broadcast: 10.20.0.255 on eth0
> 
> It appears to repeat quite periodically on about a 12 minute interval.
> Here is a sample of the times from this morning:
> 0:05
> 0:17
> 0:29
> 0:41
> 0:53
> 1:05
> 1:17
> 1:29
> 1:41
> 2:05
> 2:17
> 2:29
> 2:41
> 2:54
> 3:06
> 3:18
> 3:30
> 3:42
> 3:54
> 4:02
> 4:06
> 4:18
> 4:30
> 4:42
> 4:54
> 5:06
> 5:18
> 5:30
> 5:42
> 5:54
> 
> The device at 10.20.0.31 is a Linksys WAP 11 (pretty old box actually).
> 
> Google has been of no help to me here - any idea what this is?
> 
> 
> 
> Thanks,
> Eric
> 

http://www.iana.org/assignments/icmp-parameters

3	Destination Unreachable			 [RFC792]


check out the corresponding RFC...without seeing further logs or knowing
the kernel version or knowing your network topography, DHCP lease time,
etc. i'd guess it's a routing problem or ARP issue.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkoLTFYACgkQ8u2Zh4MtlQoLqwCff/8Imd0bHJ3FJDZ+7S4sCNkE
fBUAoOmqGBJJ+6jFlXlkk+P7IE6obW39
=wx4r
-----END PGP SIGNATURE-----
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug