Re: what does this mean: "kernel: 7.0.0.1:53 L=79 S=0x00 I=39869F=0x4000 T=64"

From: martin f krafft
Date: Thu Aug 23 2007 - 11:43:01 EST


also sprach Alexander E. Patrakov <patrakov@xxxxxxxxxx> [2007.08.23.1730 +0200]:
>> I am staring at this log message:
>> kernel: 7.0.0.1:53 L=79 S=0x00 I=39869 F=0x4000 T=64
>> and I cannot figure out what it's trying to tell me. Could someone
>> please enlighten me?
>
> Looks like some DNS packet got logged by your firewall rules.

But my firewall rules certainly do not log DNS packets, and if they
did, it would look very differently, no? I always prefix my iptables
LOG messages anyway.

This is a Xen client, if it makes a difference.

Now looking at it, it looks as if the log got garbled and 7.0.0.1:53
is really part of 127.0.0.1:53 (the machine does run a recursor).

Can stuff like this happen that data is lost in this way before
syslog can dump it?

--
martin; (greetings from the heart of the sun.)
\____ echo mailto: !#^."<*>"|tr "<*> mailto:"; net@madduck

"convictions are more dangerous enemies of truth than lies."
- friedrich nietzsche

spamtraps: madduck.bogus@xxxxxxxxxxx

Attachment: digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/)