Blocked incoming TCP Ack packet
Hej!
Jag undrar om någon skulle kunna avmystifiera följande för mig.
Line 1: 06-29-2010 10:36:48 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 201.17.181.90:1960 with unexpected sequence
Line 2: 06-29-2010 10:36:30 User.Notice 192.168.0.1 kernel: Blocked incoming TCP SynAck packet from 201.127.134.236:51413 to 83.191.X.X:4038 with unexpected sequence
Line 3: 06-29-2010 10:36:17 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 201.17.181.90:1960 with unexpected sequence
Line 4: 06-29-2010 10:36:02 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 201.17.181.90:1960 with unexpected sequence
Line 5: 06-29-2010 10:36:00 User.Notice 192.168.0.1 kernel: Blocked incoming TCP SynAck packet from 90.192.72.139:16117 to 83.191.X.X:3875 with unexpected sequence
Line 6: 06-29-2010 10:35:57 User.Notice 192.168.0.1 kernel: Blocked incoming TCP SynAck packet from 201.127.134.236:51413 to 83.191.X.X:3864 with unexpected sequence
Line 7: 06-29-2010 10:35:55 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 201.17.181.90:1960 with unexpected sequence
Line 8: 06-29-2010 10:35:51 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 201.17.181.90:1960 with unexpected sequence
Line 9: 06-29-2010 10:35:39 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 85.16.164.25:64247 with unexpected sequence
Line 10: 06-29-2010 10:35:35 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 85.16.164.25:64247 to 83.191.X.X:49844 with unexpected sequence
Line 11: 06-29-2010 10:35:35 User.Notice 192.168.0.1 kernel: Blocked incoming TCP SynAck packet from 77.54.171.168:32357 to 83.191.X.X:3652 with unexpected sequence
Line 12: 06-29-2010 10:35:30 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 85.16.164.25:64247 with unexpected sequence
Line 13: 06-29-2010 10:35:30 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 85.16.164.25:64247 to 83.191.X.X:49844 with unexpected sequence
Line 14: 06-29-2010 10:35:29 User.Notice 192.168.0.1 kernel: Blocked incoming TCP SynAck packet from 77.54.171.168:32357 to 83.191.X.X:3652 with unexpected sequence
Line 15: 06-29-2010 10:35:28 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 85.16.164.25:64247 to 83.191.X.X:49844 with unexpected sequence
Line 16: 06-29-2010 10:35:27 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 85.16.164.25:64247 to 83.191.X.X:49844 with unexpected sequence
Line 17: 06-29-2010 10:35:26 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 85.16.164.25:64247 with unexpected sequence
Line 18: 06-29-2010 10:35:26 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 85.16.164.25:64247 to 83.191.X.X:49844 with unexpected sequence
Line 19: 06-29-2010 10:35:26 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 85.16.164.25:64247 to 83.191.X.X:49844 with unexpected sequence
Line 20: 06-29-2010 10:35:24 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 85.16.164.25:64247 with unexpected sequence
Line 21: 06-29-2010 10:35:24 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 68.194.41.192:39969 to 83.191.X.X:2066 with unexpected sequence
Line 22: 06-29-2010 10:35:23 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 85.16.164.25:64247 with unexpected sequence
Line 23: 06-29-2010 10:35:23 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 85.16.164.25:64247 with unexpected sequence
Line 24: 06-29-2010 10:34:50 User.Notice 192.168.0.1 kernel: Blocked incoming TCP SynAck packet from 201.127.134.236:51413 to 83.191.X.X:3522 with unexpected sequence
Line 25: 06-29-2010 10:34:15 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 68.194.41.192:39969 to 83.191.X.X:2066 with unexpected sequence
Line 26: 06-29-2010 10:34:14 User.Notice 192.168.0.1 kernel: Blocked incoming TCP SynAck packet from 74.210.15.58:11866 to 83.191.X.X:3280 with unexpected sequence
Line 27: 06-29-2010 10:34:03 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 78.42.202.37:38642 to 83.191.X.X:1652 with unexpected sequence
Line 28: 06-29-2010 10:33:54 User.Notice 192.168.0.1 kernel: Blocked incoming TCP SynAck packet from 201.127.134.236:51413 to 83.191.X.X:3200 with unexpected sequence
Line 29: 06-29-2010 10:33:49 User.Notice 192.168.0.1 kernel: Blocked incoming TCP SynAck packet from 77.54.171.168:32357 to 83.191.X.X:3130 with unexpected sequence
Line 30: 06-29-2010 10:33:41 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 68.194.41.192:39969 to 83.191.X.X:2066 with unexpected sequence
Line 31: 06-29-2010 10:33:29 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 78.42.202.37:38642 to 83.191.X.X:1652 with unexpected sequence
Line 32: 06-29-2010 10:33:29 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 59.100.105.245:58717 to 83.191.X.X:49844 with unexpected sequence
Line 33: 06-29-2010 10:33:23 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 68.194.41.192:39969 to 83.191.X.X:2066 with unexpected sequence
Line 34: 06-29-2010 10:33:23 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 85.16.164.25:64142 with unexpected sequence
Som ni kan se så har jag ersatt min egen externa IP adress med 83.191.X.X här ovan.
1. Vad är en "incoming TCP Ack"?
2. Vad är det för skillnad mellan "incoming TCP Ack" och "incoming TCP SynAck"?
3. Varför blockeras dessa TCP Ack och TCP SynAck både för interna IP adresser som 192.168.0.101 och för externa IP adresser som 78.42.202.37?
4. Är "unexpected sequence" ett tecken på att något är fel?
Här är ett exempel på fråga 3.
Line 9: 06-29-2010 10:35:39 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 85.16.164.25:64247 with unexpected sequence
Line 27: 06-29-2010 10:34:03 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 78.42.202.37:38642 to 83.191.X.X:1652 with unexpected sequence
Den här raden (Line 9) säger alltså att ett inkommande TCP Ack från 192.168.0.101 till 85.16.164.25 har blockerats. Där är 192.168.0.101 min interna IP adress och 85.16.164.25 är inte min externa IP adress, det är någon annans IP adress. Det jag undrar då är, hur kan det vara "inkommande" om det går i riktningen från (from) 192.168.0.101 till (to) 85.16.164.25, och varför blockeras i så fall en utgående signal eller utgående datapaket? Jag kan väl inte angripa min egen dator?
Jag har märkt att för varje rad här ovan så står alltid min IP adress där, antingen den interna (192.168.0.101) eller den externa (83.191.X.X). Och om det är den interna så står det alltid "from 192.168.0.101" (dvs. den står på vänster sida) och om det är den externa så står det alltid "to 83.191.X.X" (dvs. den står på höger sida) på raden. Vad säger det här?
Här är alla "from 192.168.0.101" rader.
Line 1: 06-29-2010 10:36:48 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 201.17.181.90:1960 with unexpected sequence
Line 3: 06-29-2010 10:36:17 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 201.17.181.90:1960 with unexpected sequence
Line 4: 06-29-2010 10:36:02 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 201.17.181.90:1960 with unexpected sequence
Line 7: 06-29-2010 10:35:55 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 201.17.181.90:1960 with unexpected sequence
Line 8: 06-29-2010 10:35:51 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 201.17.181.90:1960 with unexpected sequence
Line 9: 06-29-2010 10:35:39 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 85.16.164.25:64247 with unexpected sequence
Line 12: 06-29-2010 10:35:30 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 85.16.164.25:64247 with unexpected sequence
Line 17: 06-29-2010 10:35:26 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 85.16.164.25:64247 with unexpected sequence
Line 20: 06-29-2010 10:35:24 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 85.16.164.25:64247 with unexpected sequence
Line 22: 06-29-2010 10:35:23 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 85.16.164.25:64247 with unexpected sequence
Line 23: 06-29-2010 10:35:23 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 85.16.164.25:64247 with unexpected sequence
Line 34: 06-29-2010 10:33:23 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 192.168.0.101:49844 to 85.16.164.25:64142 with unexpected sequence
Här är alla "to 83.191.X.X" rader.
Line 2: 06-29-2010 10:36:30 User.Notice 192.168.0.1 kernel: Blocked incoming TCP SynAck packet from 201.127.134.236:51413 to 83.191.X.X:4038 with unexpected sequence
Line 5: 06-29-2010 10:36:00 User.Notice 192.168.0.1 kernel: Blocked incoming TCP SynAck packet from 90.192.72.139:16117 to 83.191.X.X:3875 with unexpected sequence
Line 6: 06-29-2010 10:35:57 User.Notice 192.168.0.1 kernel: Blocked incoming TCP SynAck packet from 201.127.134.236:51413 to 83.191.X.X:3864 with unexpected sequence
Line 10: 06-29-2010 10:35:35 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 85.16.164.25:64247 to 83.191.X.X:49844 with unexpected sequence
Line 11: 06-29-2010 10:35:35 User.Notice 192.168.0.1 kernel: Blocked incoming TCP SynAck packet from 77.54.171.168:32357 to 83.191.X.X:3652 with unexpected sequence
Line 13: 06-29-2010 10:35:30 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 85.16.164.25:64247 to 83.191.X.X:49844 with unexpected sequence
Line 14: 06-29-2010 10:35:29 User.Notice 192.168.0.1 kernel: Blocked incoming TCP SynAck packet from 77.54.171.168:32357 to 83.191.X.X:3652 with unexpected sequence
Line 15: 06-29-2010 10:35:28 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 85.16.164.25:64247 to 83.191.X.X:49844 with unexpected sequence
Line 16: 06-29-2010 10:35:27 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 85.16.164.25:64247 to 83.191.X.X:49844 with unexpected sequence
Line 18: 06-29-2010 10:35:26 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 85.16.164.25:64247 to 83.191.X.X:49844 with unexpected sequence
Line 19: 06-29-2010 10:35:26 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 85.16.164.25:64247 to 83.191.X.X:49844 with unexpected sequence
Line 21: 06-29-2010 10:35:24 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 68.194.41.192:39969 to 83.191.X.X:2066 with unexpected sequence
Line 24: 06-29-2010 10:34:50 User.Notice 192.168.0.1 kernel: Blocked incoming TCP SynAck packet from 201.127.134.236:51413 to 83.191.X.X:3522 with unexpected sequence
Line 25: 06-29-2010 10:34:15 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 68.194.41.192:39969 to 83.191.X.X:2066 with unexpected sequence
Line 26: 06-29-2010 10:34:14 User.Notice 192.168.0.1 kernel: Blocked incoming TCP SynAck packet from 74.210.15.58:11866 to 83.191.X.X:3280 with unexpected sequence Line 27: 06-29-2010 10:34:03 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 78.42.202.37:38642 to 83.191.X.X:1652 with unexpected sequence
Line 28: 06-29-2010 10:33:54 User.Notice 192.168.0.1 kernel: Blocked incoming TCP SynAck packet from 201.127.134.236:51413 to 83.191.X.X:3200 with unexpected sequence
Line 29: 06-29-2010 10:33:49 User.Notice 192.168.0.1 kernel: Blocked incoming TCP SynAck packet from 77.54.171.168:32357 to 83.191.X.X:3130 with unexpected sequence
Line 30: 06-29-2010 10:33:41 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 68.194.41.192:39969 to 83.191.X.X:2066 with unexpected sequence
Line 31: 06-29-2010 10:33:29 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 78.42.202.37:38642 to 83.191.X.X:1652 with unexpected sequence
Line 32: 06-29-2010 10:33:29 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 59.100.105.245:58717 to 83.191.X.X:49844 with unexpected sequence
Line 33: 06-29-2010 10:33:23 User.Notice 192.168.0.1 kernel: Blocked incoming TCP Ack packet from 68.194.41.192:39969 to 83.191.X.X:2066 with unexpected sequence
Jag får såna här meddelanden varje dag av ett värde av omkring 4 MB. Är det normalt att man får så många eller är det något fel på min router? Kanske något som är felinställt. Routern är en D-Link DIR-825.
Tack på förhand!
"Good teaching is one-fourth preparation and three-fourths pure theatre."—Gail Godwin
Sweclockers BB kod
0101001101000111