syslog messages

[k_o_l]

My syslog server is being filled with the following generated by
pfsense-2.0-RC3




<http://kb.monitorware.com/kbsearch.php?sa=whois&oid=ip&origin=phplogcon&q=1
69.254.1.213> 169.254.1.213.56971 >
<http://kb.monitorware.com/kbsearch.php?sa=whois&oid=ip&origin=phplogcon&q=1
69.254.1.255> 169.254.1.255.5000: UDP, length 12



Any ideas?



Thanks,

Sam Hammand

[greg whynott]

looks like you have a windows client that was unable to get an address from
your dhcp server and is sending out service discovery stuff..

but i could be wrong. 8)

-g

Post by k_o_l
My syslog server is being filled with the following generated by
pfsense-2.0-RC3****
** **
*169.254.1.213*<http://kb.monitorware.com/kbsearch.php?sa=whois&oid=ip&origin=phplogcon&q=169.254.1.213>.56971
UDP, length 12****
** **
Any ideas?****
** **
Thanks,****
Sam Hammand****
** **

[k_o_l]

From: greg whynott [mailto:greg.whynott-***@public.gmane.org]
Sent: Friday, August 26, 2011 12:04 PM
To: support-***@public.gmane.org
Subject: Re: [pfSense Support] syslog messages



looks like you have a windows client that was unable to get an address from
your dhcp server and is sending out service discovery stuff..



but i could be wrong. 8)



-g







On Fri, Aug 26, 2011 at 11:56 AM, k_o_l <k_o_l-***@public.gmane.org> wrote:

My syslog server is being filled with the following generated by
pfsense-2.0-RC3




<http://kb.monitorware.com/kbsearch.php?sa=whois&oid=ip&origin=phplogcon&q=1
69.254.1.213> 169.254.1.213.56971 >
<http://kb.monitorware.com/kbsearch.php?sa=whois&oid=ip&origin=phplogcon&q=1
69.254.1.255> 169.254.1.255.5000: UDP, length 12



Any ideas?



Thanks,

Sam Hammand


____________________________________________________________________________
________________________________________________



Unless I'm wrong it appears that the source is the firewall

[Chris Buechler]

Post by k_o_l
My syslog server is being filled with the following generated by
pfsense-2.0-RC3
 169.254.1.213.56971 > 169.254.1.255.5000: UDP, length 12

Some device on your LAN with that autoconfigured 169.254.1.213 (which,
unless that's your LAN subnet, means a machine that can't get a DHCP
lease) is sending out broadcast UDP 5000 traffic.

---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe-***@public.gmane.org
For additional commands, e-mail: support-help-***@public.gmane.org

Commercial support available - https://portal.pfsense.org