Re: nf_hook:hook 4 already set?

From: Wojtek Walczak (gminick@hacker.pl)
Date: 05/13/02


From: Wojtek Walczak <gminick@hacker.pl>
Date: Mon, 13 May 2002 12:54:26 +0000 (UTC)

Dnia Mon, 13 May 2002 17:24:46 +0800, Jason napisał(a):
> I don't understand what the following message:
> nf_hook:hook 4 already set.
> skb: pf=2 (unowned) dev =lo len=44
> PROTO=6 X.X.X.X:110 Y.Y.Y.Y:64378 L=44 S=0x00 I=20822 F=0x4000 T=1
> Would anyone give me some help?
Yes, strange thing, since it looks like a tcp packet from loopback (dev=lo)
sent from POP3 port to some high port (64378).
Len of that packet is 44 bytes, so, I think that is rather a RST packet
than something else.
I've got a question: was those X.X.X.X and Y.Y.Y.Y the same ?
If yes, was it this value: 127.0.0.1 ? ;)

-- 
[ Wojtek gminick Walczak ][ http://hacker.pl/gminick/ ]
[ gminick (at) hacker.pl ][ gminick (at) klub.chip.pl ]



Relevant Pages

  • Re: ipfw drive me crazy
    ... I observe a strange behavior with ipfw/natd and fwd command. ... the same packet, fwd to a same address, use a different outgoing interface ... the tun0 is the default gateway interface inside the freebsd. ...
    (comp.unix.bsd.freebsd.misc)
  • Re: Questions about NAT and IPTables - Interpreting the logs . .
    ... > Also - I know what a DROPPED packet is - but what does ABORTED mean? ... The Log aborted TCP connections check box controls whether ... TCP connections that are forcefully terminated using a RST packet are ... > Below is a snip from the log - any interpretation would be ...
    (comp.security.firewalls)
  • Re: [FreeBSD 5.2] Bandwith and packet throttling
    ... The deny loopback is strange, I assume my roommate put that in there ... "An ipfw configuration, or ruleset, is made of a list of rules numbered ... the packet, it is possible that ipfw is invoked multiple times on the ... The packet passed to the firewall is compared against each ...
    (freebsd-net)
  • Re: multiple recv() calls required
    ... recv(). ... I also ran tcpdump with both bits of code and in the ... non-sleepcase a RST packet seems to be sent immediately after a ... large packet is received which I assume is the definition. ...
    (comp.unix.programmer)
  • Re: [fw-wiz] Random and strange RST,ACKs
    ... Those RST, ... ACKs appear during the session. ... Subject: Random and strange RST,ACKs ... Continuation[Unreassembled Packet] ...
    (Firewall-Wizards)

Quantcast