Hi there
A bit from the syslog (UTC + 1); Those 'MAC=' strings are rather weird. There are even bits of ascii in 05:03:25 GMT /kite/ HTTP/1.1 'xs6all' is a v4tunnel interface. Which doesn't have a mac address. Any idea what is going on? Regards,
Mar 23 06:04:27 sput kernel: [245625.292575] IN=xs6all OUT=
MAC=20:00:40:2f:ae:8f:0a:00:00:96:ff:03:00:21:45:00:00:5c:00:00:40:00:3e:29
TUNNEL=194.109.5.241->80.101.95.251
SRC=2002:18e6:b8dc:0000:0000:0000:18e6:b8dc
DST=2001:0888:1533:0001:0000:0000:0000:0001 LEN=72 TC=0 HOPLIMIT=116
FLOWLBL=0 PROTO=TCP SPT=52204 DPT=8080 WINDOW=8192 RES=0x00 CWR ECE SYN
URGP=0
Mar 23 06:04:30 sput kernel: [245628.308577] IN=xs6all OUT=
MAC=00:00:eb:01:00:00:7e:ff:7d:23:ff:03:00:21:45:00:00:5c:00:00:40:00:3e:29
TUNNEL=194.109.5.241->80.101.95.251
SRC=2002:18e6:b8dc:0000:0000:0000:18e6:b8dc
DST=2001:0888:1533:0001:0000:0000:0000:0001 LEN=72 TC=0 HOPLIMIT=116
FLOWLBL=0 PROTO=TCP SPT=52204 DPT=8080 WINDOW=8192 RES=0x00 CWR ECE SYN
URGP=0
Mar 23 06:04:36 sput kernel: [245634.328566] IN=xs6all OUT=
MAC=00:00:8f:01:00:00:7e:ff:7d:23:ff:03:00:21:45:00:00:58:00:00:40:00:3e:29
TUNNEL=194.109.5.241->80.101.95.251
SRC=2002:18e6:b8dc:0000:0000:0000:18e6:b8dc
DST=2001:0888:1533:0001:0000:0000:0000:0001 LEN=68 TC=0 HOPLIMIT=116
FLOWLBL=0 PROTO=TCP SPT=52204 DPT=8080 WINDOW=8192 RES=0x00 SYN URGP=0
there (converting :XX to an ascii value);
Server: Apache/2.2.16
Accept: text/html,text
Rob