This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Odd "DNS" traffic

I am seeing log entries like this every 15 seconds:
2015:08:03-22:57:29 sophosutm ulogd[5274]: id="2000" severity="info" sys="SecureNet" sub="packetfilter" name="Packet logged" action="log" fwrule="0" srcip="x.x.x.x" dstip="208.67.220.220" proto="17" length="28" tos="0x00" prec="0x00" ttl="64" srcport="43978" dstport="53" info="nf_ct_dns: dropping packet: Inappropriately formated record: Only -45 left for type and class

2015:08:03-22:57:29 sophosutm ulogd[5274]: id="2000" severity="info" sys="SecureNet" sub="packetfilter" name="Packet logged" action="log" fwrule="0" srcip="x.x.x.x" dstip="208.67.222.222" proto="17" length="28" tos="0x00" prec="0x00" ttl="64" srcport="56030" dstport="53" info="nf_ct_dns: dropping packet: Inappropriately formated record: Only -12 left for type and class

Anyone else seeing this in their logs?  When I capture the traffic there is not a valid DNS request, I am just not sure what it is doing.  I started as soon as I upgraded to 9.314GA and I just completed a reinstall/restore and it is still doing it now.


This thread was automatically locked due to age.
Parents Reply Children
No Data