
14 May
2010
14 May
'10
12:54 p.m.
Hi guys, While looking at my /var/log/messages, I came across this line which caught my eye: May 14 11:01:27 my-host.my.domain kernel: LEN=40 TOS=0x00 PREC=0x00 TTL=127 ID=20868 DF PRO<7>BANDWIDTH_OUT:IN=eth1 OUT=eth0 SRC=10.230.0.63 DST=10.230.255.255 LEN=78 TOS=0x00 PREC=0x00 TTL=120 ID=51910 PROTO=UDP SPT=137 DPT=137 LEN=58 Interface eth1 is towards my LAN while eth0 is my external interface (facing the internet). The reason that this line caught my eye is because I have no hosts in the 10.230.0.0 subnet. So I am wondering what this means. The IP subnet masks for both interfaces are 255.255.255.252 allowing for only two hosts per interface's subnet. What could this IP address be for? Me.