Odd syslogd message

General Discussion of atomic repo and development projects.

Ask for help here with anything else not covered by other forums.
Highland
Forum Regular
Forum Regular
Posts: 674
Joined: Mon Apr 10, 2006 12:55 pm

Odd syslogd message

Unread post by Highland »

Was in SSH and got this message several times (wasn't identical every time but close enough). This was not looking through a log file, btw, but was output by the console.
Message from syslogd@ at Thu Jun 23 08:42:20 2011 ...
server kernel: nf_ct_ftp: dropping packetIN= OUT=lo SRC=1.2.3.4 DST=1.2.3.4 LEN=106 TOS=0x00 PREC=0x00 TTL=64 ID=55794 DF PROTO=TCP SPT=21 DPT=45124 SEQ=611356370 ACK=604964020 WINDOW=65535 RES=0x00 ACK PSH URGP=0 OPT (0101050A240F04AE240F04B4) UID=0 GID=0
"Its not a mac. I run linux... I'm actually cool." - scott
User avatar
mikeshinn
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
Posts: 4149
Joined: Thu Feb 07, 2008 7:49 pm
Location: Chantilly, VA

Re: Odd syslogd message

Unread post by mikeshinn »

Thats generated by the netfilter FTP "helper" module that handles the complex mess that is FTP. It means the helper decided to drop a packet, which usually is caused by partial FTP command matches, which the module can't handle. So, you can ignore it if otherwise FTP is working. If its not, then something is likely wrong with the client doing something non-standard with the protocol.

If you dont use iptables logging, you can unload he ipt_LOG module and you wont see these anymore.
Post Reply