1 Temat przez KeFaS (edytowany przez KeFaS 2015-06-13 14:43:15)

  • KeFaS
  • Użytkownik
  • Nieaktywny
  • Zarejestrowany: 2009-03-19
  • Posty: 81

Temat: Logi routera zawalone niepokojącymi wpisami

Cześć,

Patrząc w logread i dmesg na routerze ASUS WL-500g Premium ze starym, ale stabilnym OpenWRT 8.09 (r14571 by obsy, kernel 2.4.35.4) zauważyłem pełno takich wpisów:

Jun 13 14:40:00 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:40:06 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:40:06 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:40:11 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:40:11 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:40:16 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:40:16 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:40:20 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:40:26 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:40:26 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:40:30 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:40:35 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:40:35 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:40:39 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:40:39 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:40:45 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:40:45 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:40:50 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:40:50 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:40:56 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:40:56 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:41:01 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:41:01 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:41:07 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:41:07 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:41:12 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:41:12 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:41:15 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:41:15 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:41:19 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:41:19 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:41:24 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:41:24 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:41:34 OpenWrt user.warn kernel: NET: 2 messages suppressed.
Jun 13 14:41:34 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:41:35 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:41:41 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:41:41 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:41:45 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:42:36 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:42:56 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:42:58 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:43:01 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:43:03 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:43:06 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:43:08 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:43:10 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:43:12 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:43:15 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:43:19 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:43:22 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:43:24 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:43:28 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:43:30 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:43:32 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:43:35 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:43:38 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:43:41 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:43:43 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:43:48 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:43:48 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:43:52 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:43:52 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:43:57 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:43:57 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:44:04 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:44:04 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:44:08 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:44:13 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:44:13 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:44:18 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:44:18 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:44:23 OpenWrt user.warn kernel: NET: 2 messages suppressed.
Jun 13 14:44:23 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:44:29 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:44:32 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:44:38 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:44:38 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:44:46 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:44:49 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:44:52 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:44:58 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:44:58 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:45:05 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:45:17 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:45:20 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:45:22 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:45:23 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:45:27 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:45:32 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:45:32 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:45:39 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:45:45 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:45:47 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:45:55 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:45:55 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:46:02 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:46:04 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:46:08 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:46:13 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:46:17 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:46:17 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:46:23 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:46:23 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:46:27 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:46:27 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:46:33 OpenWrt user.warn kernel: NET: 2 messages suppressed.
Jun 13 14:46:33 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:46:38 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:46:38 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:46:43 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:46:43 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:46:47 OpenWrt user.warn kernel: NET: 2 messages suppressed.
Jun 13 14:46:47 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:46:55 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:46:55 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:46:57 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:47:05 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:47:08 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:47:12 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:47:16 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:47:16 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:47:23 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:47:23 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:47:28 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:47:28 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:47:32 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:47:32 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:47:40 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:47:40 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:47:43 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:47:47 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:47:53 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:47:53 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:47:58 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:47:58 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:48:02 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:48:09 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:48:09 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:48:14 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:48:17 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:48:22 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:48:22 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:48:28 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:48:32 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:48:32 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:48:37 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:48:37 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:48:43 OpenWrt user.warn kernel: NET: 2 messages suppressed.
Jun 13 14:48:43 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:48:49 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:48:49 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:48:56 OpenWrt user.warn kernel: NET: 1 messages suppressed.
Jun 13 14:48:56 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:49:05 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:49:11 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:49:13 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:49:25 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:49:41 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:49:43 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:49:53 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:50:05 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:50:11 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:50:13 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:50:15 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:50:21 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:50:23 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:50:25 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:50:32 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:50:33 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:50:35 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:50:46 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 14:50:54 OpenWrt user.warn kernel: wl0: received packet with  own address as source address
Jun 13 15:12:03 OpenWrt authpriv.info dropbear[4921]: Child connection from 192.168.1.174:50789
Jun 13 15:12:08 OpenWrt authpriv.notice dropbear[4921]: password auth succeeded for 'root' from 192.168.1.174:50789
Jun 13 15:12:59 OpenWrt authpriv.info dropbear[4921]: exit after auth (root): Exited normally
Jun 13 15:13:53 OpenWrt authpriv.info dropbear[4938]: Child connection from 192.168.1.174:50823
Jun 13 15:13:58 OpenWrt authpriv.notice dropbear[4938]: password auth succeeded for 'root' from 192.168.1.174:50823

Obecnie zajmuje to całe miejsce w logread.
dmesg pokazuje podobne wpisy:

wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 2 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 2 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 2 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 2 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 2 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 2 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 2 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 2 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 2 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 2 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
NET: 1 messages suppressed.
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address
wl0: received packet with  own address as source address

Mimo tego sieć działa dobrze.
Do routera obecnie jest podłączony tylko jeden komputer po Wi-Fi. Przeważnie jest jeszcze kilka komputerów, smartfonów i TV po Wi-Fi, czasem coś po kablu. Często mam uruchomione irssi na screenie, czasem podłączam dysk pod USB i odpalę rTorrent. Ogólnie OpenWRT skonfigurowałem kilka lat temu i działa bez zarzutu (raz musiałem wymienić zasilacz, bo oryginalny padł).  Wcześniej takie wpisy pojawiały się sporadycznie, ale teraz, gdy cały log jest nimi zawalony zacząłem się niepokoić.

Co może być przyczyną takich informacji w logach? Ktoś mi "aircrackuje" sieć?

Jeżeli to nic złego to jak wyfiltrować te wpisy? Często patrzę w logread, żeby wiedzieć co się dzieje w mojej sieci, OpenWRT używam tylko z konsoli, bez gui.

BTW. Jest sens aktualizować na tym sprzęcie aktualizować OpenWRT do 10.03, lub nowszego, jeżeli ten router jest jeszcze wspierany? Zostawiłem 8.09, bo te parę lat temu na tym kernelu najlepiej działało Wi-Fi, a potem już nie kombinowałem z nowszymi wersjami, zgodnie z zasadą "jeżeli działa to nie ruszać" ;-)

2 Odpowiedź przez Cezary

  • Skąd: Warszawa
  • Zarejestrowany: 2006-02-25
  • Posty: 115,877

Odp: Logi routera zawalone niepokojącymi wpisami

To z moduły kernela, całkiem możliwe że coś ci sieje w sieci po prostu.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

Cezary's Strona

3 Odpowiedź przez KeFaS

  • KeFaS
  • Użytkownik
  • Nieaktywny
  • Zarejestrowany: 2009-03-19
  • Posty: 81

Odp: Logi routera zawalone niepokojącymi wpisami

Ok, ale jak to sprawdzić/wykryć co sieje i się tego pozbyć? Jakiś sniffer się nada?

4 Odpowiedź przez Cezary

  • Skąd: Warszawa
  • Zarejestrowany: 2006-02-25
  • Posty: 115,877

Odp: Logi routera zawalone niepokojącymi wpisami

Zwykły tcpdump żeby zobaczyć jak pakiety wyglądają.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

Cezary's Strona

5 Odpowiedź przez KeFaS (edytowany przez KeFaS 2015-06-13 17:22:21)

  • KeFaS
  • Użytkownik
  • Nieaktywny
  • Zarejestrowany: 2009-03-19
  • Posty: 81

Odp: Logi routera zawalone niepokojącymi wpisami

Jaką składnię wybrać dla tcpdumpa, żeby to sprawdzić?

Mój ifconfig wygląda tak:

root@OpenWrt:~# ifconfig -a
br-lan    Link encap:Ethernet  HWaddr 00:1E:8C:D3:8E:77
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:106325539 errors:0 dropped:0 overruns:0 frame:0
          TX packets:198560813 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:2775974425 (2.5 GiB)  TX bytes:1800645014 (1.6 GiB)

eth0      Link encap:Ethernet  HWaddr 00:1E:8C:D3:8E:77
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:235576234 errors:0 dropped:0 overruns:0 frame:0
          TX packets:130977130 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:3871720263 (3.6 GiB)  TX bytes:1176295689 (1.0 GiB)
          Interrupt:4

eth0.0    Link encap:Ethernet  HWaddr 00:1E:8C:D3:8E:77
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:12256121 errors:0 dropped:0 overruns:0 frame:0
          TX packets:25154518 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:775899467 (739.9 MiB)  TX bytes:271133592 (258.5 MiB)

eth0.1    Link encap:Ethernet  HWaddr 00:1E:8C:D3:8E:77
          inet addr: xx.xx.xx.xx  Bcast:255.255.255.255  Mask:255.255.252.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:223262982 errors:0 dropped:0 overruns:0 frame:0
          TX packets:105783213 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:3074403203 (2.8 GiB)  TX bytes:210482564 (200.7 MiB)

eth1      Link encap:Ethernet  HWaddr 40:10:18:00:00:2D
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:5

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:3140 errors:0 dropped:0 overruns:0 frame:0
          TX packets:3140 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:299483 (292.4 KiB)  TX bytes:299483 (292.4 KiB)

wl0       Link encap:Ethernet  HWaddr 00:1E:8C:D3:8E:77
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:94980788 errors:759 dropped:0 overruns:0 frame:94744559
          TX packets:174557583 errors:107760 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:4276189745 (3.9 GiB)  TX bytes:2377127067 (2.2 GiB)
          Interrupt:2 Base address:0x2000

Próbowałem dla br-lan i eth0.1 (to jest WAN, wyciąłem tylko mój zew. adres IP z powyższego) i w ogóle bez ustalania interfejsu, ale pokazuje tyle tego, że nie wiem czy po prostu żywcem to skopiować, czy można tam jakoś odfiltrować to co niepotrzebne? Jak potem interpretować te zrzuty?

Znalazłem na jakiejś stronie instrukcje, żeby zrzucać do pliku *.pcap i potem Wiresharkiem to sprawdzić, zaraz spróbuję.

Edit: ok, ogarnąłem to w Wiresharku, teraz tylko proszę o jakieś wskazówki na co patrzeć? Czy mam cały czas łapać pakiety tcpdumpem, czy tylko wtedy jak zobaczę, że te wpisy w logach się pojawiają (teraz np. już ich nie ma, ale pewnie za jakiś czas znowu zaleją mi logi), no i na jakim interfejsie słuchać tcpdumpem i co potem odfiltrowywać w Wiresharku?

6 Odpowiedź przez Cezary

  • Skąd: Warszawa
  • Zarejestrowany: 2006-02-25
  • Posty: 115,877

Odp: Logi routera zawalone niepokojącymi wpisami

Adres ip interfejsu na którym się burzy. A później musisz jakoś dojść dlaczego pojawia się on jako źródłowy na tym interfejsie....

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

Cezary's Strona

7 Odpowiedź przez KeFaS (edytowany przez KeFaS 2015-06-13 18:22:48)

  • KeFaS
  • Użytkownik
  • Nieaktywny
  • Zarejestrowany: 2009-03-19
  • Posty: 81

Odp: Logi routera zawalone niepokojącymi wpisami

Według logów problem jest na interfejsie wl0, a on sam w sobie nie ma przypisanego IP. Czyli mam ustawić w tcpdumpie wl0, br-lan czy eth0.0? Nie za bardzo to ogarniam. Może mam coś skopane w konfiguracji? Chociaż to by było dziwne, bo przez kilka lat nie zmieniałem nic w konfiguracji sieci i nie było takich problemów.

root@OpenWrt:/etc/config# cat wireless
config wifi-device      "wl0"
    option type         "broadcom"
    option channel      "1"
    option disabled     "0"

config wifi-iface
    option device       "wl0"
    option network      lan
    option mode         "ap"
    option ssid         "xxx"
    option hidden       "0"
    option encryption   "psk2"
    option key          xxx
root@OpenWrt:/etc/config# cat network

config 'switch' 'eth0'
        option 'vlan0' '1 2 3 4 5*'
        option 'vlan1' '0 5'

config 'interface' 'loopback'
        option 'ifname' 'lo'
        option 'proto' 'static'
        option 'ipaddr' '127.0.0.1'
        option 'netmask' '255.0.0.0'

config 'interface' 'lan'
        option 'type' 'bridge'
        option 'ifname' 'eth0.0'
        option 'proto' 'static'
        option 'ipaddr' '192.168.1.1'
        option 'netmask' '255.255.255.0'
        option 'wireless' 'wl0'

config 'interface' 'wan'
        option 'ifname' 'eth0.1'
        option 'proto' 'dhcp'
root@OpenWrt:/etc/config# cat dhcp
config dnsmasq
        option domainneeded     1
        option boguspriv        1
        option filterwin2k      '0'  #enable for dial on demand
        option localise_queries 1
        option local    '/lan/'
        option domain   'lan'
        option expandhosts      1
        option nonegcache       0
        option authoritative    1
        option readethers       1
        option leasefile        '/tmp/dhcp.leases'
        option resolvfile       '/tmp/resolv.conf.auto'

config dhcp lan
        option interface        lan
        option start    174
        option limit    25
        option leasetime        24h

config dhcp wan
        option interface        wan
        option ignore   1


Edit: w sieci na różnych forach czytam, że to częsty problem, ale nie ma jednoznacznego rozwiązania. Może to po prostu wina samego OpenWRT? Da się jakoś odfiltrować logread z tych wpisów? Bo szczerze mówiąc to nie mam czasu analizować tych wszystkich pakietów (może kiedyś, jak będę mieć więcej czasu to się tym pobawię).

8 Odpowiedź przez Cezary

  • Skąd: Warszawa
  • Zarejestrowany: 2006-02-25
  • Posty: 115,877

Odp: Logi routera zawalone niepokojącymi wpisami

Zignoruj...

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

Cezary's Strona

9 Odpowiedź przez KeFaS

  • KeFaS
  • Użytkownik
  • Nieaktywny
  • Zarejestrowany: 2009-03-19
  • Posty: 81

Odp: Logi routera zawalone niepokojącymi wpisami

Ok, a mógłbyś mi coś poradzić, żeby po prostu te wpisy mi nie zawalały logów? Da się założyć na logread jakiś skrypt z odpowiednim filtrem, np wygrepować to co niepotrzebne?

10 Odpowiedź przez Cezary

  • Skąd: Warszawa
  • Zarejestrowany: 2006-02-25
  • Posty: 115,877

Odp: Logi routera zawalone niepokojącymi wpisami

Jeżeli zwykły logread to nie zrobisz  nic z tym, wyłączyć też nie masz jak. Jak coś innego (syslog-ng?) to możesz takiego coś ignorować.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

Cezary's Strona

11 Odpowiedź przez KeFaS (edytowany przez KeFaS 2015-06-14 09:51:17)

  • KeFaS
  • Użytkownik
  • Nieaktywny
  • Zarejestrowany: 2009-03-19
  • Posty: 81

Odp: Logi routera zawalone niepokojącymi wpisami

OK, dzięki za pomoc smile

Na razie zrobiłem sobie skrypt, który mi wygrepowuje ten syf z logread i po prostu odpalam go zamiast "czystego" polecenia logread. Chociaż to mi w sumie niewiele daje, bo logread ma określony bufor, więc i tak nie widzę całej reszty logów.
We flashu już mi brakuje miejsca, poszukam jakiegoś starego pendrive i zainstaluje tam ten syslog-ng.
Tylko ciekawe czy na zasilaczu 5V/2A (oryginalny był 2.5A) w ogóle zadziała USB i będzie stabilne...