|
本帖最后由 waitopen 于 2016-3-5 22:57 编辑
状况:近半个月网速很慢,前天看了日志,经常出现:
- Mar 5 21:32:28 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=20:6a:8a:80:30:f5 MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=348 TOS=0x00 PREC=0x00 TTL=64 ID=8912 PROTO=UDP SPT=68 DPT=67 LEN=328
- Mar 5 21:34:13 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=20:6a:8a:80:30:f5 MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=348 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=328
- Mar 5 21:35:53 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=30 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:35:55 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=32 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:35:57 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=34 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:36:01 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=36 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:36:03 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=38 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:36:15 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=40 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:36:17 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=42 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:36:19 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=44 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:36:23 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=46 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:36:25 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=68 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:37:07 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=70 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:37:09 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=72 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:37:11 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=74 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:37:15 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=76 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:37:17 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=78 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:38:29 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=228 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:38:31 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=230 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:38:33 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=232 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:38:37 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=234 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:38:39 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=236 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:39:09 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=212 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:39:11 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=248 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:39:13 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=8c:f2:28:53:fe:4b MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=18 DF PROTO=UDP SPT=68 DPT=67 LEN=556
- Mar 5 21:40:45 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=3c:97:0e:8f:8d:00 MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=308
- Mar 5 21:40:45 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=3c:97:0e:8f:8d:00 MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=354 TOS=0x00 PREC=0x00 TTL=64 ID=1 PROTO=UDP SPT=68 DPT=67 LEN=334
- Mar 5 21:44:02 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=20:89:84:42:82:d3 MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=349 TOS=0x00 PREC=0x00 TTL=64 ID=15074 PROTO=UDP SPT=68 DPT=67 LEN=329
- Mar 5 21:44:07 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=20:89:84:42:82:d3 MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=349 TOS=0x00 PREC=0x00 TTL=64 ID=15075 PROTO=UDP SPT=68 DPT=67 LEN=329
- Mar 5 21:44:12 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=20:89:84:42:82:d3 MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=349 TOS=0x00 PREC=0x00 TTL=64 ID=15076 PROTO=UDP SPT=68 DPT=67 LEN=329
- Mar 5 21:44:12 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=20:89:84:42:82:d3 MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=15077 PROTO=UDP SPT=68 DPT=67 LEN=308
- Mar 5 21:44:12 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=20:89:84:42:82:d3 MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=355 TOS=0x00 PREC=0x00 TTL=64 ID=15078 PROTO=UDP SPT=68 DPT=67 LEN=335
- Mar 5 21:44:34 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=20:89:84:42:82:d3 MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=349 TOS=0x00 PREC=0x00 TTL=64 ID=15079 PROTO=UDP SPT=68 DPT=67 LEN=329
复制代码
今天换了网段,又出现下面日志:
说明下,172.16.165.228是我上级路由配给我WAN口的IP
- Mar 5 22:35:21 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=dc:0e:a1:ea:68:cb MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=348 TOS=0x00 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=328
- Mar 5 22:37:05 unknown user.warn kernel: DROP IN=ppp0 OUT= MAC= SRC=210.52.214.184 DST=172.16.165.228 LEN=56 TOS=0x00 PREC=0x00 TTL=85 ID=28560 DF PROTO=TCP SPT=80 DPT=49986 SEQ=2677994990 ACK=2103414024 WINDOW=63300 RES=0x00 ACK PSH URGP=0
- Mar 5 22:37:06 unknown user.warn kernel: DROP IN=ppp0 OUT= MAC= SRC=210.52.214.184 DST=172.16.165.228 LEN=56 TOS=0x00 PREC=0x00 TTL=85 ID=28561 DF PROTO=TCP SPT=80 DPT=49986 SEQ=2677994990 ACK=2103414024 WINDOW=63300 RES=0x00 ACK PSH URGP=0
- Mar 5 22:37:06 unknown user.warn kernel: DROP IN=ppp0 OUT= MAC= SRC=210.52.214.184 DST=172.16.165.228 LEN=56 TOS=0x00 PREC=0x00 TTL=85 ID=28562 DF PROTO=TCP SPT=80 DPT=49986 SEQ=2677994990 ACK=2103414024 WINDOW=63300 RES=0x00 ACK PSH URGP=0
- Mar 5 22:37:08 unknown user.warn kernel: DROP IN=ppp0 OUT= MAC= SRC=210.52.214.184 DST=172.16.165.228 LEN=56 TOS=0x00 PREC=0x00 TTL=85 ID=28563 DF PROTO=TCP SPT=80 DPT=49986 SEQ=2677994990 ACK=2103414024 WINDOW=63300 RES=0x00 ACK PSH URGP=0
- Mar 5 22:37:12 unknown user.warn kernel: DROP IN=ppp0 OUT= MAC= SRC=210.52.214.184 DST=172.16.165.228 LEN=56 TOS=0x00 PREC=0x00 TTL=85 ID=28564 DF PROTO=TCP SPT=80 DPT=49986 SEQ=2677994990 ACK=2103414024 WINDOW=63300 RES=0x00 ACK PSH URGP=0
- Mar 5 22:37:19 unknown user.warn kernel: DROP IN=ppp0 OUT= MAC= SRC=210.52.214.184 DST=172.16.165.228 LEN=56 TOS=0x00 PREC=0x00 TTL=85 ID=28565 DF PROTO=TCP SPT=80 DPT=49986 SEQ=2677994990 ACK=2103414024 WINDOW=63300 RES=0x00 ACK PSH URGP=0
- Mar 5 22:37:33 unknown user.warn kernel: DROP IN=ppp0 OUT= MAC= SRC=210.52.214.184 DST=172.16.165.228 LEN=56 TOS=0x00 PREC=0x00 TTL=85 ID=28566 DF PROTO=TCP SPT=80 DPT=49986 SEQ=2677994990 ACK=2103414024 WINDOW=63300 RES=0x00 ACK PSH URGP=0
- Mar 5 22:37:53 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=e0:cb:4e:0a:04:2a MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=353 TOS=0x00 PREC=0x00 TTL=128 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=333
- Mar 5 22:37:56 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=e0:cb:4e:0a:04:2a MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=353 TOS=0x00 PREC=0x00 TTL=128 ID=1 PROTO=UDP SPT=68 DPT=67 LEN=333
- Mar 5 22:37:57 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=e0:cb:4e:0a:04:2a MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=328 TOS=0x00 PREC=0x00 TTL=128 ID=2 PROTO=UDP SPT=68 DPT=67 LEN=308
- Mar 5 22:37:58 unknown user.warn kernel: DROP IN=vlan2 OUT= MACSRC=e0:cb:4e:0a:04:2a MACDST=ff:ff:ff:ff:ff:ff MACPROTO=0800 SRC=0.0.0.0 DST=255.255.255.255 LEN=359 TOS=0x00 PREC=0x00 TTL=128 ID=3 PROTO=UDP SPT=68 DPT=67 LEN=339
- Mar 5 22:38:01 unknown user.warn kernel: DROP IN=ppp0 OUT= MAC= SRC=210.52.214.184 DST=172.16.165.228 LEN=56 TOS=0x00 PREC=0x00 TTL=85 ID=28567 DF PROTO=TCP SPT=80 DPT=49986 SEQ=2677994990 ACK=2103414024 WINDOW=63300 RES=0x00 ACK PSH URGP=0
- Mar 5 22:38:58 unknown user.warn kernel: DROP IN=ppp0 OUT= MAC= SRC=210.52.214.184 DST=172.16.165.228 LEN=56 TOS=0x00 PREC=0x00 TTL=85 ID=28568 DF PROTO=TCP SPT=80 DPT=49986 SEQ=2677994990 ACK=2103414024 WINDOW=63300 RES=0x00 ACK PSH URGP=0
- Mar 5 22:40:52 unknown user.warn kernel: DROP IN=ppp0 OUT= MAC= SRC=210.52.214.184 DST=172.16.165.228 LEN=56 TOS=0x00 PREC=0x00 TTL=85 ID=28569 DF PROTO=TCP SPT=80 DPT=49986 SEQ=2677994990 ACK=2103414024 WINDOW=63300 RES=0x00 ACK PSH URGP=0
复制代码
|
|