Please help with system logs
-
Good Morning,
I just searched the logs and found some entries that I don't know how to handle:
the IP is my Macbook and the log is from "Routing" - every few minutes I get spammed with that.
Jun 3 08:21:25 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
Jun 3 08:21:25 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
Jun 3 08:17:09 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
Jun 3 08:17:09 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
Jun 3 08:15:01 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
Jun 3 08:15:01 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
Jun 3 08:13:57 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
Jun 3 08:13:57 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
Jun 3 08:13:25 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
Jun 3 08:13:25 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
Jun 3 08:13:09 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
Jun 3 08:13:09 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
Jun 3 08:13:01 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
Jun 3 08:13:01 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoringThe other spam I get is from the "Resolver" and looks like this
Jun 3 08:20:20 dnsmasq[12752]: read /etc/hosts - 32 addresses
Jun 3 08:14:24 dnsmasq[12752]: read /etc/hosts - 32 addresses
Jun 3 08:12:51 dnsmasq[12752]: read /etc/hosts - 32 addresses
Jun 3 08:11:52 dnsmasq[12752]: read /etc/hosts - 32 addresses
Jun 3 08:11:46 dnsmasq[12752]: read /etc/hosts - 32 addresses
Jun 3 08:10:37 dnsmasq[12752]: read /etc/hosts - 32 addresses
Jun 3 08:09:07 dnsmasq[12752]: read /etc/hosts - 32 addresses
Jun 3 08:07:45 dnsmasq[12752]: read /etc/hosts - 33 addresses
Jun 3 08:04:57 dnsmasq[12752]: read /etc/hosts - 33 addressesPlease help me where I have to search that this spamming stops. Where can be the issue (despite of me).
-
Jun 3 08:21:25 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoring
Jun 3 08:21:25 miniupnpd[98076]: SSDP packet sender 192.168.1.199:64391 not from a LAN, ignoringYou appear to be using a routing daemon of some kind, are you running RIP? Without knowing your exact routing setup, I'm just guessing, but you could probably prevent these log entries with a firewall rule on your LAN interface since they are all from the same IP and port… but if you are actually using UPnP on your network then filtering it out of your router could break things. (I suspect it won't, but what do I know?)
I'd try a rule like this:
ID Proto Source Port Destination Port Gateway Queue Schedule
block * IPv4 192.168.1.199 64391 LAN Address * * *Jun 3 08:20:20 dnsmasq[12752]: read /etc/hosts - 32 addresses
Jun 3 08:09:07 dnsmasq[12752]: read /etc/hosts - 32 addressesThis one I can't help with other than to suggest you double-check all your dnsmasq settings? Maybe reboot the router to see if it clears up?
