1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Paranoid or real problem

Discussion in 'Cisco Small Business Routers and VPN Solutions' started by ed001, May 27, 2006.

  1. ed001

    ed001 Network Guru Member

    I got an e-mail from my WRV54G via wall watcher of the following. Note the 194.22.190.12 is not my static IP. It comes back to I believe some amsterdam ISP range. I x'ed out my personal info:

    CUSTOM ALERTS: {...}
    5/26/2006 5:44:46 AM Router WAN IP address has changed from x.x.x.x to 194.22.190.12

    Current Date, time: 5/26/2006 5:44:46 AM
    Router IP Address: 194.22.190.12
    Records received from Router: 1580
    Records logged: 1549
    Inbound records in log: 166
    Outbound records in log: 1072
    Alerts issued: 0
    Last record from Router at: 5/26/2006 5:44:46 AM

    I have a static IP at this location. I got a message 59 minutes later in the same format that the IP had changed back to the real IP.

    Here is an excerpt from the log at that time:
    2006/05/26 05:44:46.50 M 'ips0' #3: sent qi2, ipsec sa established on ixp1
    2006/05/26 05:44:46.50 M conf: configuration completed (status: success) on ixp1
    2006/05/26 05:44:46.50 M 'ips0' #6: regenerating dh private secret to avoid pluto 1.0 bug handling public value with leading zero on ixp1
    2006/05/26 05:44:46.50 I udp x.x.x.x(local lan) 1042 194.22.190.12 53 block-rules on br0

    This seems very strange. Is this just some reporting error by wall watcher or the WRV54G?
    I do have the wireless function disabled at this location which I believe is the "br0" mention. No forwarding or open ports of any kind with the exception of 443 for Quick VPN.
    Thanks for any help!!!
    If you need more to go on let me know
     
  2. DocLarge

    DocLarge Super Moderator Staff Member Member

    That IP address is actually coming out of Sweden.

    Have you checked the logs on the machines at the remote location to see if anyone was trying to look in? Doesn't hurt to look...

    Doc
     
  3. ed001

    ed001 Network Guru Member

    This really concerns me, Any ideas!

    Here is an excerpt from the log just prior to the above problem.
    I have oscured my wan IP addresses as x.x.x.x with a description in paraenthesis.
    east corp1 is this router/10.0.0.X and 10.0.1.X and 10.0.2.X are my two local secure gateway lans.


    2006/05/26 05:42:44.66 O esp x.x.x.x (remote A wan address) x.x.x.x (Wan IP this router) on ixp1
    2006/05/26 05:42:45.16 O esp x.x.x.x (remote A wan address) x.x.x.x (Wan IP this router) on ixp1
    2006/05/26 05:42:45.16 O esp x.x.x.x (remote A wan address) x.x.x.x (Wan IP this router) on ixp1
    2006/05/26 05:42:45.16 O esp x.x.x.x (remote A wan address) x.x.x.x (Wan IP this router) on ixp1
    2006/05/26 05:42:45.16 O esp x.x.x.x (remote A wan address) x.x.x.x (Wan IP this router) on ixp1
    2006/05/26 05:42:45.16 O esp x.x.x.x (remote A wan address) x.x.x.x (Wan IP this router) on ixp1
    2006/05/26 05:44:41.08 M east corp1 klogd: task started on ixp1
    2006/05/26 05:44:41.80 M east corp1 rg_system_full:255: pluto --nofork --debug-none --uniqueids on ixp1
    2006/05/26 05:44:41.80 M conf: configuration started (mode: activate) on ixp1
    2006/05/26 05:44:41.88 M east corp1 rg_system_full:275: spawned pid 31 on ixp1
    2006/05/26 05:44:41.88 M conf: configuration completed (status: success) on ixp1
    2006/05/26 05:44:41.89 M east corp1 mt_igmp_changed:99: igmp changed: interface: ixp0 on ixp1
    2006/05/26 05:44:41.89 B tcp 127.0.0.1 7000 127.0.0.1 1025 accept on lo
    2006/05/26 05:44:41.91 M east corp1 dev_if_prism_gt_ap: failed to set ssid on ixp1
    2006/05/26 05:44:41.91 I esp x.x.x.x (remote B wan address) x.x.x.x (Wan IP this router) block-rules on ixp1
    2006/05/26 05:44:41.92 M east corp1 snmp: binding agent on x.x.x.x (Wan IP this router) on ixp1
    2006/05/26 05:44:41.92 I esp x.x.x.x (remote B wan address) x.x.x.x (Wan IP this router) block-rules on ixp1
    2006/05/26 05:44:41.92 M east corp1 snmp: binding agent on 10.0.0.1 on ixp1
    2006/05/26 05:44:41.92 I esp x.x.x.x (remote B wan address) x.x.x.x (Wan IP this router) block-rules on ixp1
    2006/05/26 05:44:41.94 M east corp1 failed to set device ixp0 netmask: cannot assign requested address on ixp1
    2006/05/26 05:44:41.94 O udp x.x.x.x (remote B wan address) 500 x.x.x.x (Wan IP this router) 500 on ixp1
    2006/05/26 05:44:41.94 M east corp1 mt_igmp_params_init:61: igmp reconf: new lan interface: ixp0 on ixp1
    2006/05/26 05:44:41.94 O udp x.x.x.x (remote A wan address) 500 x.x.x.x (Wan IP this router) 500 on ixp1
    2006/05/26 05:44:41.94 M east corp1 mt_igmp_params_init:61: igmp reconf: new lan interface: eth0 on ixp1
    2006/05/26 05:44:41.94 M conf: configuration started (mode: activate) on ixp1
    2006/05/26 05:44:41.94 M east corp1 igmp_if_index:42: ioctl failed, errno=19. no such device. on ixp1
    2006/05/26 05:44:41.94 M conf: configuration completed (status: success) on ixp1
    2006/05/26 05:44:41.96 M east corp1 rg_system_full:255: /bin/killall updatedd on ixp1
    2006/05/26 05:44:41.96 O udp 151.198.0.39 home5.bellatlantic.net 53 x.x.x.x (Wan IP this router) 1024 on ixp1
    2006/05/26 05:44:41.96 M east corp1 rg_system_full:275: spawned pid 33 on ixp1
    2006/05/26 05:44:41.96 O udp 151.202.0.85 nyc2-qwest.bellatlantic.net 53 x.x.x.x (Wan IP this router) 1024 on ixp1
    2006/05/26 05:44:41.96 M east corp1 rg_system_full:255: wala on ixp1
    2006/05/26 05:44:41.96 M east corp1 rg_system_full:275: spawned pid 34 on ixp1
    2006/05/26 05:44:41.96 M east corp1 run_ext_proc:23: calls to external processes should be added here. on ixp1
    2006/05/26 05:44:41.96 M east corp1 error resolving hostname: '' on ixp1
    2006/05/26 05:44:41.96 M starting pluto (frees/wan version 1.99) on ixp1
    2006/05/26 05:44:41.96 M east corp1 process 33 exited. no action was taken on ixp1
    2006/05/26 05:44:41.97 M ast corp1 linux version 2.4.19openrg-rmk6-ds1 #258 fri nov 5 15:31:48 cst 2004 on ixp1
    2006/05/26 05:44:41.97 M ast corp1 cpu: intel xscale-ixp425 revision 0 on ixp1
    2006/05/26 05:44:41.97 M ast corp1 machine: gemtek ixp425 wx5715 on ixp1
    2006/05/26 05:44:41.97 M ast corp1 warning: bad configuration page, trying to continue on ixp1
    2006/05/26 05:44:41.97 M ast corp1 initrd (0xc01b1000 - 0xc01b6000) extends beyond physical memory - disabling initrd on ixp1
    2006/05/26 05:44:41.97 M ast corp1 memory range 0x1fff000-0x2000000 is excluded because of pci dma bug on ixp1
    2006/05/26 05:44:41.97 O udp 207.153.221.89 ntp-alx.dn.net 123 x.x.x.x (Wan IP this router) 123 on ixp1
    2006/05/26 05:44:41.99 M ast corp1 security risk: creating user accessible mapping for 0xc8000000 at 0xff000000 on ixp1
    2006/05/26 05:44:41.99 O tcp 63.208.196.95 members2.bos.dyndns.org 80 x.x.x.x (Wan IP this router) 1028 on ixp1
    2006/05/26 05:44:41.99 M ast corp1 security risk: creating user accessible mapping for 0xc0000000 at 0xff00c000 on ixp1
    2006/05/26 05:44:41.99 M ast corp1 security risk: creating user accessible mapping for 0xc4000000 at 0xff00d000 on ixp1
    2006/05/26 05:44:41.99 M ast corp1 on node 0 totalpages: 8192 on ixp1
    2006/05/26 05:44:41.99 M ast corp1 zone(0): 8192 pages. on ixp1
    2006/05/26 05:44:41.99 M ast corp1 zone(1): 0 pages. on ixp1
    2006/05/26 05:44:42.19 M ast corp1 zone(2): 0 pages. on ixp1
    2006/05/26 05:44:42.19 M ast corp1 kernel command line: console=ttys1,115200 root=/dev/ram0 rw nohalt on ixp1
    2006/05/26 05:44:42.19 M ast corp1 using ixp425 timer 0 as timer source on ixp1
    2006/05/26 05:44:42.19 M ast corp1 calibrating delay loop... 266.24 bogomips on ixp1
    2006/05/26 05:44:42.19 O udp 192.5.6.32 chia.arin.net 53 10.0.0.11 1042 on ixp1
    2006/05/26 05:44:42.33 M ast corp1 memory: 32mb = 32mb total on ixp1
    2006/05/26 05:44:42.33 O udp 209.244.0.1 ns1.level3.net 53 10.0.0.11 1042 on ixp1
    2006/05/26 05:44:42.33 M ast corp1 memory: 26036kb available (1395k code, 4725k data, 216k init) on ixp1
    2006/05/26 05:44:42.33 O udp 204.74.112.1 tld1.ultradns.net 53 10.0.0.11 1042 on ixp1
    2006/05/26 05:44:42.33 M ast corp1 xscale cache/tlb locking copyright(c) 2001 montavista software, inc. on ixp1
    2006/05/26 05:44:42.33 O udp 213.155.150.205 ns4.dyndns.org 53 10.0.0.11 1042 on ixp1
    2006/05/26 05:44:42.33 M ast corp1 dentry cache hash table entries: 4096 (order: 3, 32768 bytes) on ixp1
    2006/05/26 05:44:42.33 M ast corp1 inode cache hash table entries: 2048 (order: 2, 16384 bytes) on ixp1
    2006/05/26 05:44:42.33 M ast corp1 mount-cache hash table entries: 512 (order: 0, 4096 bytes) on ixp1
    2006/05/26 05:44:42.33 M ast corp1 buffer-cache hash table entries: 1024 (order: 0, 4096 bytes) on ixp1
    2006/05/26 05:44:42.33 M ast corp1 page-cache hash table entries: 8192 (order: 3, 32768 bytes) on ixp1
    2006/05/26 05:44:42.33 M ast corp1 posix conformance testing by unifix on ixp1
    2006/05/26 05:44:42.33 M ast corp1 pci: bus0: fast back to back transfers enabled on ixp1
    2006/05/26 05:44:42.33 M ast corp1 linux net4.0 for linux 2.4 on ixp1
    2006/05/26 05:44:42.33 M ast corp1 based upon swansea university computer society net3.039 on ixp1
    2006/05/26 05:44:42.33 M ast corp1 initializing rt netlink socket on ixp1
    2006/05/26 05:44:42.33 M ast corp1 starting kswapd on ixp1
    2006/05/26 05:44:42.33 M ast corp1 on ixp1
    2006/05/26 05:44:42.33 M ast corp1 random: 0x8c220460 on ixp1
    2006/05/26 05:44:42.33 M ast corp1 pty: 256 unix98 ptys configured on ixp1
    2006/05/26 05:44:42.33 M ast corp1 serial driver version 5.05c (2001-07-08) with many_ports share_irq serial_pci enabled on ixp1
    2006/05/26 05:44:42.33 M ast corp1 ttys00 at 0xff000003 (irq = 15) is a ixp425 uart on ixp1
    2006/05/26 05:44:42.35 M ast corp1 ttys01 at 0xff001003 (irq = 13) is a ixp425 uart on ixp1
    2006/05/26 05:44:42.35 M ast corp1 ramdisk driver initialized: 16 ram disks of 16384k size 1024 blocksize on ixp1
    2006/05/26 05:44:42.35 M ast corp1 loop: loaded (max 8 devices) on ixp1
    2006/05/26 05:44:42.35 M ast corp1 ppp generic driver version 2.4.2 on ixp1
    2006/05/26 05:44:42.35 M ast corp1 net4: linux tcp/ip 1.0 for net4.0 on ixp1
    2006/05/26 05:44:42.35 M ast corp1 ip protocols: icmp, udp, tcp, igmp on ixp1
    2006/05/26 05:44:42.35 M ast corp1 ip: routing cache hash table of 512 buckets, 4kbytes on ixp1
    2006/05/26 05:44:42.35 M ast corp1 tcp: hash tables configured (established 2048 bind 2048) on ixp1
    2006/05/26 05:44:42.35 M ast corp1 net4: unix domain sockets 1.0/smp for linux net4.0. on ixp1
    2006/05/26 05:44:42.35 M ast corp1 ipv6 v0.8 for net4.0 on ixp1
    2006/05/26 05:44:42.35 M ast corp1 ipv6 over ipv4 tunneling driver on ixp1
    2006/05/26 05:44:42.35 M ast corp1 802.1q vlan support v1.7 ben greear <greearb@candelatech.com> on ixp1
    2006/05/26 05:44:42.35 M ast corp1 all bugs added by david s. miller <davem@redhat.com> on ixp1
    2006/05/26 05:44:42.35 M ast corp1 netwinder floating point emulator v0.95 (c) 1998-1999 rebel.com on ixp1
    2006/05/26 05:44:42.35 M ast corp1 ppp mppe compression module registered on ixp1
    2006/05/26 05:44:42.35 M ast corp1 klips_info:ipsec_init: klips startup, frees/wan ipsec version: 1.99 on ixp1
    2006/05/26 05:44:42.35 M ast corp1 ramdisk: compressed image found at block 0 on ixp1
    2006/05/26 05:44:42.35 M ast corp1 freeing initrd memory: 20k on ixp1
    2006/05/26 05:44:42.35 M ast corp1 vfs: mounted root (ext2 filesystem). on ixp1
    2006/05/26 05:44:42.35 M ast corp1 freeing init memory: 216k on ixp1
    2006/05/26 05:44:42.35 M ast corp1 mounting cramfs image at 'cramfs' on ixp1
    2006/05/26 05:44:42.35 M ast corp1 using buffer write method on ixp1
    2006/05/26 05:44:42.35 M ast corp1 using predefined mtd partitions. on ixp1
    2006/05/26 05:44:42.35 M ast corp1 creating 1 mtd partitions on 'ixp425 flash': on ixp1
    2006/05/26 05:44:42.35 M ast corp1 0x00000000-0x00800000 : 'openrg' on ixp1
    2006/05/26 05:44:42.35 M ast corp1 ppp deflate compression module registered on ixp1
    2006/05/26 05:44:42.35 M ast corp1 ppp bsd compression module registered on ixp1
    2006/05/26 05:44:42.35 M ast corp1 intel csr module init. on ixp1
    2006/05/26 05:44:42.35 M ast corp1 error: ipsec_hwaccel_add_service: invalid function pointers! on ixp1
    2006/05/26 05:44:42.36 M ast corp1 intel csr qmgr & npe(s) init done. on ixp1
    2006/05/26 05:44:42.36 M ast corp1 initializing ixp425_eth driver 0.0.8 on ixp1
    2006/05/26 05:44:42.36 M ast corp1 phy 0 mac address is: 04:04:04:04:04:04 on ixp1
    2006/05/26 05:44:42.49 M ast corp1 phy 1 mac address is: 06:06:06:06:06:06 on ixp1
    2006/05/26 05:44:42.49 M ast corp1 ipv4 device driver registered on ixp1
    2006/05/26 05:44:42.49 M ast corp1 ip filter: initialized. default = block all on ixp1
    2006/05/26 05:44:42.49 M ast corp1 phy 1 mac address is: 00:0c:41:d6:f1:4c on ixp1
    2006/05/26 05:44:42.49 M ast corp1 phy 0 mac address is: 00:0c:41:d6:f1:4b on ixp1
    2006/05/26 05:44:42.49 M ast corp1 ixp0: entering promiscuous mode on ixp1
    2006/05/26 05:44:42.49 O udp 192.35.51.32 f3.nstld.com 53 10.0.0.11 1042 on ixp1
    2006/05/26 05:44:42.49 M ast corp1 device ixp0 entered promiscuous mode on ixp1
    2006/05/26 05:44:42.49 M ast corp1 stp: ixp0 enters blocking mode on ixp1
    2006/05/26 05:44:42.49 M including x.509 patch with traffic selectors (version 0.9.21) on ixp1
    2006/05/26 05:44:42.49 M changing to directory '/etc/ipsec.d/cacerts' on ixp1
    2006/05/26 05:44:42.49 M warning: empty directory on ixp1
    2006/05/26 05:44:42.49 M could not change to directory '/etc/ipsec.d/crls' on ixp1
    2006/05/26 05:44:42.49 M could not open my default x.509 cert file '/etc/x509cert.der' on ixp1
    2006/05/26 05:44:42.49 M openpgp certificate file '/etc/pgpcert.pgp' not found on ixp1
    2006/05/26 05:44:42.49 M added connection description 'ips0' on ixp1
    2006/05/26 05:44:42.50 M east corp1 dns: trying forwarder 151.202.0.85. on ixp1
    2006/05/26 05:44:42.50 M listening for ike messages on ixp1
    2006/05/26 05:44:42.50 M east corp1 dns: trying forwarder 151.202.0.85. on ixp1
    2006/05/26 05:44:42.50 M adding interface ipsec0/ixp1 x.x.x.x (Wan IP this router) on ixp1
    2006/05/26 05:44:42.50 M 'ips0' #1: initiating main mode on ixp1
    2006/05/26 05:44:42.50 M added connection description 'ips1' on ixp1
    2006/05/26 05:44:42.50 M east corp1 dns: trying forwarder 151.202.0.85. on ixp1
    2006/05/26 05:44:42.50 M listening for ike messages on ixp1
    2006/05/26 05:44:42.50 M forgetting secrets on ixp1
    2006/05/26 05:44:42.50 M 'ips1' #2: initiating main mode on ixp1
    2006/05/26 05:44:42.50 M 'ips1' #2: regenerating dh private secret to avoid pluto 1.0 bug handling public value with leading zero on ixp1
    2006/05/26 05:44:42.50 M 'ips0' #1: main mode peer id is id_ipv4_addr: 'x.x.x.x (remote B wan address)' on ixp1
    2006/05/26 05:44:42.50 M 'ips0' #1: isakmp sa established on ixp1
    2006/05/26 05:44:42.50 M 'ips0' #3: initiating quick mode psk+tunnel+pfs on ixp1
    2006/05/26 05:44:42.50 M east corp1 error resolving hostname: '0.0.0.0/0' on ixp1
    2006/05/26 05:44:42.50 M east corp1 error resolving hostname: '0.0.0.0/0' on ixp1
    2006/05/26 05:44:42.50 M east corp1 error resolving hostname: '0.0.0.0/0' on ixp1
    2006/05/26 05:44:42.50 M east corp1 tod got new time 1148636682 on ixp1
    2006/05/26 05:44:42.50 M 'ips1' #2: main mode peer id is id_ipv4_addr: 'x.x.x.x (remote A wan address)' on ixp1
    2006/05/26 05:44:42.50 M 'ips1' #2: isakmp sa established on ixp1
    2006/05/26 05:44:42.50 M 'ips1' #4: initiating quick mode psk+tunnel+pfs on ixp1
    2006/05/26 05:44:42.50 M 'ips1' #5: initiating main mode to replace #2 on ixp1
    2006/05/26 05:44:42.50 M 'ips0' #6: initiating main mode to replace #1 on ixp1
    2006/05/26 05:44:42.50 M east corp1 ddns update successful, ip = x.x.x.x (Wan IP this router), server response = good on ixp1
    2006/05/26 05:44:46.50 O udp 204.69.234.1 udns1.ultradns.net 53 10.0.0.11 1042 on ixp1
    2006/05/26 05:44:46.50 O udp 192.134.0.49 ns3.nic.fr 53 10.0.0.11 1042 on ixp1
    2006/05/26 05:44:46.50 O udp 204.70.57.242 ns02.savvis.net 53 10.0.0.11 1042 on ixp1
    2006/05/26 05:44:46.50 M east corp1 error resolving hostname: '' on ixp1
    2006/05/26 05:44:46.50 M conf: configuration started (mode: activate) on ixp1
    2006/05/26 05:44:46.50 M 'ips0' #3: sent qi2, ipsec sa established on ixp1
    2006/05/26 05:44:46.50 M conf: configuration completed (status: success) on ixp1
    2006/05/26 05:44:46.50 M 'ips0' #6: regenerating dh private secret to avoid pluto 1.0 bug handling public value with leading zero on ixp1
    2006/05/26 05:44:46.50 I udp 10.0.0.11 1042 194.22.190.12 53 block-rules on br0
    2006/05/26 05:44:46.50 M east corp1 dns: trying forwarder 151.202.0.85. on ixp1
    2006/05/26 05:44:46.50 M east corp1 dns: trying forwarder 151.202.0.85. on ixp1
    2006/05/26 05:44:46.50 M east corp1 dns: trying forwarder 151.202.0.85. on ixp1
    2006/05/26 05:44:46.50 M east corp1 error resolving hostname: '0.0.0.0/0' on ixp1
    2006/05/26 05:44:46.50 M east corp1 error resolving hostname: '0.0.0.0/0' on ixp1
    2006/05/26 05:44:46.50 M east corp1 error resolving hostname: '0.0.0.0/0' on ixp1
    2006/05/26 05:44:46.50 M east corp1 error resolving hostname: '' on ixp1
    2006/05/26 05:44:46.50 M conf: configuration started (mode: activate) on ixp1
    2006/05/26 05:44:46.50 M 'ips1' #4: sent qi2, ipsec sa established on ixp1
    2006/05/26 05:44:46.50 M conf: configuration completed (status: success) on ixp1
    2006/05/26 05:44:46.50 M 'ips0' #1: ignoring delete sa payload: ipsec sa not found (maybe expired) on ixp1
    2006/05/26 05:44:46.50 I udp 10.0.0.15 137 10.0.0.255 137 block-rules on br0
    2006/05/26 05:44:46.50 M 'ips0' #1: received and ignored informational message on ixp1
    2006/05/26 05:44:46.50 M packet from x.x.x.x (remote B wan address):500: informational exchange is for an unknown (expired?) sa block-rules on ixp1
    2006/05/26 05:44:46.50 M east corp1 dns: trying forwarder 151.202.0.85. on ixp1
    2006/05/26 05:44:46.50 M 'ips1' #2: ignoring delete sa payload: ipsec sa not found (maybe expired) on ixp1
    2006/05/26 05:44:46.50 M 'ips1' #2: received and ignored informational message on ixp1
    2006/05/26 05:44:46.50 M packet from x.x.x.x (remote A wan address):500: informational exchange is for an unknown (expired?) sa on ixp1
    2006/05/26 05:44:46.50 M packet from x.x.x.x (remote A wan address):500: informational exchange is for an unknown (expired?) sa on ixp1
    2006/05/26 05:44:46.50 M east corp1 dns: trying forwarder 151.202.0.85. on ixp1
    2006/05/26 05:44:46.50 M east corp1 dns: trying forwarder 151.202.0.85. on ixp1
    2006/05/26 05:44:46.50 M east corp1 error resolving hostname: '0.0.0.0/0' on ixp1
    2006/05/26 05:44:46.50 M east corp1 error resolving hostname: '0.0.0.0/0' on ixp1
    2006/05/26 05:44:46.50 M east corp1 error resolving hostname: '0.0.0.0/0' on ixp1
    2006/05/26 05:44:46.50 M 'ips0' #6: main mode peer id is id_ipv4_addr: 'x.x.x.x (remote B wan address)' on ixp1
    2006/05/26 05:44:46.50 M 'ips0' #6: isakmp sa established on ixp1
    2006/05/26 05:44:46.50 M 'ips1' #5: main mode peer id is id_ipv4_addr: 'x.x.x.x (remote A wan address)' on ixp1
    2006/05/26 05:44:46.50 M 'ips1' #5: isakmp sa established on ixp1
    2006/05/26 05:44:46.50 O udp 194.22.194.18 dns3.telia.com 53 10.0.0.11 1042 on ixp1
    2006/05/26 05:44:46.94 O udp 63.170.10.81 53 10.0.0.11 1042 on ixp1
    2006/05/26 05:44:48.91 O udp 192.5.6.30 a.gtld-servers.net 53 10.0.0.11 1042 on ixp1
    2006/05/26 05:44:48.91 O udp 68.178.211.100 cns2.secureserver.net 53 10.0.0.11 1042 on ixp1
    2006/05/26 05:44:48.91 O udp 64.202.167.31 cns1.secureserver.net 53 10.0.0.11 1042 on ixp1
    2006/05/26 05:44:48.91 O tcp 64.202.165.58 smtp.starfieldtech.com 80 10.0.0.11 4238 on ixp1
    2006/05/26 05:44:53.80 O udp 194.22.190.10 dns1.telia.com 53 10.0.0.11 1042 on ixp1
    2006/05/26 05:44:53.80 O udp 144.228.254.10 ns2-auth.sprintlink.net 53 10.0.0.11 1042 on ixp1
    2006/05/26 05:44:53.80 O udp 63.170.10.81 137 10.0.0.11 137 on ixp1
    2006/05/26 05:44:53.80 M ast corp1 stp: ixp0 exits blocking mode on ixp1
    2006/05/26 05:45:09.28 M east corp1 vendor buffer is <vendor information which is to be written to the vendor section and read from it later on. test information only, change it according to your needs> on ixp
     

Share This Page