[Date Prev][Date Next][Thread Prev][Thread Next][Thread Index]

[fw1-gurus] LOG_CRIT Kernel errors.



Hello,

This morning I am seeing lots of LOG_CRIT errors, the hex values translate to IP addresses non of which I would count as being one of my customers. 

A couple of weeks ago, I had simular errors which were trying to use one of my public DNS servers as a recursive lookup as part of a  DDOS attack, but in that instance one of the hex values was (as the destination) my DNS server.  These messages are different and do not give me a clue as to what is going on.

Can anyone shed any light? Or give me some pointers as to what is going on.. I am tempted to just block them at my perimeter routers but I would prefer to understand what the traffic is before I do that.

Bf71015 = 191.113.1.5 Latin American and Caribbean IP, Mexco..
62f71015 = 98.247.16.21 Comcast Cable Communications, Inc.
9fd0562c = 159.208.86.44 Sunlife Assurance Company of Canada


Feb 20 09:58:03 thk22fw2 [LOG_CRIT] kernel: fwhandle_get(rtmChains.c:1640): Table kbufs - Invalid handle 2e638012 - entry used for handle 37638012 with value a9865370
Feb 20 09:58:03 thk22fw2 [LOG_CRIT] kernel: fwhandle_get(rtmChains.c:1640): Table kbufs - Invalid handle 2e638012 - entry used for handle 37638012 with value a9865370
Feb 20 09:58:05 thk22fw2 [LOG_CRIT] kernel: fwhandle_get(rtmChains.c:1640): Table kbufs - Invalid handle 2e638012 - entry used for handle 37638012 with value a9865370
Feb 20 09:58:05 thk22fw2 [LOG_CRIT] kernel: fwhandle_get(rtmChains.c:1640): Table kbufs - Invalid handle 2e638012 - entry used for handle 37638012 with value a9865370
Feb 20 09:58:07 thk22fw2 [LOG_CRIT] kernel: fwhandle_get(rtmChains.c:1640): Table kbufs - Invalid handle bf71015 - entry used for handle 62f71015 with value 9fd0562c
Feb 20 09:58:07 thk22fw2 [LOG_CRIT] kernel: fwhandle_get(rtmChains.c:1640): Table kbufs - Invalid handle bf71015 - entry used for handle 62f71015 with value 9fd0562c
Feb 20 09:58:07 thk22fw2 [LOG_CRIT] kernel: fwhandle_get(rtmChains.c:1640): Table kbufs - Invalid handle 2e638012 - entry used for handle 37638012 with value a9865370
Feb 20 09:58:07 thk22fw2 [LOG_CRIT] kernel: fwhandle_get(rtmChains.c:1640): Table kbufs - Invalid handle 2e638012 - entry used for handle 37638012 with value a9865370
Feb 20 09:58:10 thk22fw2 [LOG_CRIT] kernel: fwhandle_get(rtmChains.c:1640): Table kbufs - Invalid handle 2e638012 - entry used for handle 37638012 with value a9865370
Feb 20 09:58:10 thk22fw2 [LOG_CRIT] kernel: fwhandle_get(rtmChains.c:1640): Table kbufs - Invalid handle 2e638012 - entry used for handle 37638012 with value a9865370

Regards,

Mat.

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System and delivered to you by Cobweb Solutions, Europe's leading provider of Microsoft Hosted Exchange.  Discover how Hosted Exchange could help your business at http://www.hostedexchange.co.uk/

VAT No. 682 2512 41
Registered office address:
South Wing, Delme Place, Fareham, Hants, PO16 8UX 
Registered in England No. 3283443 
Registered with: Companies House, Crown Way, Cardiff, CF14 3UZ
______________________________________________________________________
_______________________________________________
fw1-gurus mailing list
[email protected]
http://lists.phoneboy.com/listinfo.cgi/fw1-gurus-phoneboy.com