Re: strange firewall log

From: asp (anonymous_at_discussion.microsoft.com)
Date: 07/09/04 

Date: Fri, 9 Jul 2004 22:05:09 +0800

Oh,I found that the packet sent to the destination IP is not my IP, it sent
to a IP that I use as my browser's proxy server.
But it is more odd--why my firewall blocked and loged the packet sent to
non-my IP?
here is a example of the logs:
protocol:TCP(flags:S)
sources IP: xxx.xxx.xxx.xxx:3546
destination IP:xxx.xxx.xxx.xxx:8080
direction:outgoing
Please help me with the understanding of logs. Thanks.

"Ben Smith [MSFT]" <bensmi@online.microsoft.com> дÈëÓʼþ
news:MPG.1b583963310c3e99989683@msnews.microsoft.com...
> In article <OCykyVbZEHA.2016@TK2MSFTNGP09.phx.gbl>,
> anonymous@discussion.microsoft.com says...
> > I found a strange log in my firewall logs. My firewall blocked a
outgoing
> > packet sent from my IP to another IP. The protocol is TCP. But at that
time
> > I didn't use any outgoing program to access the internet. Anyone tell me
> > why? Thanks.
> >
> >
> >
> post the log file
>
> Ben

Relevant Pages

  • RE: Transfer a sending packet to upper TCP/IP protocol layer in IM
    ... source and destination MAC addresses are the same for both IP versions. ... the destination NIC of IPv6 packet is the same as the destination NIC of my ... encapped IPv4 packet. ...
    (microsoft.public.development.device.drivers)
  • Re: [Full-Disclosure] write events log to CD?
    ... IMHO even using packet writing this is not a good solution for log ... The principle of using WORM media for storing logs is an interesting ... 20mb overhead, about as efficient as drinking water to increase your ... Some googled details on packet writing support on CDR's: ...
    (Full-Disclosure)
  • Re: TOE brain dump
    ... primarily over ATMish core networks. ... "if you can't find header address ... the flow, if you can find a VC from cache, send the packet there" ... destination node address selector bits in header, ...
    (Linux-Kernel)
  • Re: site to site vpn with internal NAT
    ... :interface. ... :192.168.1.101 tries to contact a peer on the remote side, ... so the *destination* IP 192.168.49.x will be changed to the destination ... and since there is a match, the packet will go out over the VPN. ...
    (comp.dcom.sys.cisco)
  • RE: Transfer a sending packet to upper TCP/IP protocol layer in IM
    ... the destination NIC of IPv6 packet is the same as the destination NIC of my ... encapped IPv4 packet. ... you should clearly realize that emulating non-existent IPv6 ...
    (microsoft.public.development.device.drivers)