1

Hourly events in the firewall-log, originating from Ubuntu12.04-box. How to find the reason?

view story
linux-howto

http://askubuntu.com – every hour, the logfile on our firewall (IPCop 1.4.20, 192.168.1.8) lists nine lines, apparently caused by my Computer (Ubuntu 12.04, 192.168.1.55): Jan 8 08:01:16 ipc9 kernel: NEW not SYN? IN=eth0 OUT= MAC=00:04:06:08:0b:03:00:0c:0e:05:07:01:01:00 SRC= 192.168.1.55 DST=192.168.1.8 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=36594 DF PROTO=TCP SPT=44474 DPT=800 WIN DOW=37960 RES=0x00 ACK FIN URGP=0 ... Jan 8 08:02:08 ipc9 kernel: NEW not SYN? IN=eth0 OUT= MAC=00:04:06:08:0b:03:00:0c:0e:05:07:04:08:00 SRC= 192.168.1.55 DST=192.168.1.8 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=36602 DF PROTO=TCP SPT=4447 (HowTos)