H
hstoellinger
Guest
Lately I have noticed loads of log messages in syslog of the following format:
Oct 10 21:08:42 hsdesk kernel: [46216.760661] IN IN=eth0 OUT= MAC=70:f3:95:00:00:2d:00:1d:ba:86:ca:c7:08:00 SRC=10.0.0.3 DST=10.0.0.2 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=22795 DF PROTO=TCP SPT=51137 DPT=5552 WINDOW=29200 RES=0x00 SYN URGP=0
Oct 10 21:08:47 hsdesk kernel: [46221.268803] IN IN=eth0 OUT= MAC=70:f3:95:00:00:2d:00:1d:ba:86:ca:c7:08:00 SRC=10.0.0.3 DST=10.0.0.2 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=29757 DF PROTO=TCP SPT=51138 DPT=5552 WINDOW=29200 RES=0x00 SYN URGP=0
They appear roughly every 5 seconds. There are two systems on the LAN, connected by a router. The systems run Debian 8 and Linux-Mint 17.2 respectively. Has anybody got an idea what might cause these messages? Apparently DPT 5552 is a "non-assigned" port.
Thanks for any hints
H. Stoellinger, Salzburg
Oct 10 21:08:42 hsdesk kernel: [46216.760661] IN IN=eth0 OUT= MAC=70:f3:95:00:00:2d:00:1d:ba:86:ca:c7:08:00 SRC=10.0.0.3 DST=10.0.0.2 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=22795 DF PROTO=TCP SPT=51137 DPT=5552 WINDOW=29200 RES=0x00 SYN URGP=0
Oct 10 21:08:47 hsdesk kernel: [46221.268803] IN IN=eth0 OUT= MAC=70:f3:95:00:00:2d:00:1d:ba:86:ca:c7:08:00 SRC=10.0.0.3 DST=10.0.0.2 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=29757 DF PROTO=TCP SPT=51138 DPT=5552 WINDOW=29200 RES=0x00 SYN URGP=0
They appear roughly every 5 seconds. There are two systems on the LAN, connected by a router. The systems run Debian 8 and Linux-Mint 17.2 respectively. Has anybody got an idea what might cause these messages? Apparently DPT 5552 is a "non-assigned" port.
Thanks for any hints
H. Stoellinger, Salzburg
