Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Message from syslogd

Discussion in 'General Discussion' started by morteza3245, Nov 8, 2013.

  1. morteza3245

    morteza3245 Well-Known Member

    Joined:
    Sep 16, 2013
    Messages:
    138
    Likes Received:
    1
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    Hi
    my putty was open in my system , after 5/6H i see below log in putty, what is them? how i can resolve them?

    Code:
    root@host [/var/cpanel]#
Message from syslogd@host at Nov  8 09:27:34 ...
 kernel:[739509.894667] nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=188.40.89.145 DST=206.72.194.14 LEN=53 TOS=0x10 PREC=0x00 TTL=64 ID=52082 DF PROTO=TCP SPT=21 DPT=4252 SEQ=2814533456 ACK=4008658383 WINDOW=14600 RES=0x00 ACK PSH URGP=0 UID=0 GID=0

Message from syslogd@host at Nov  8 09:27:34 ...
 kernel:[739509.895413] nf_ct_ftp: dropping packetIN= OUT=eth0 SRC=188.40.89.145 DST=206.72.194.14 LEN=53 TOS=0x10 PREC=0x00 TTL=64 ID=52083 DF PROTO=TCP SPT=21 DPT=4252 SEQ=2814533456 ACK=4008658383 WINDOW=14600 RES=0x00 ACK PSH FIN URGP=0 UID=0 GID=0
^C
    Thanks!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #1 morteza3245, Nov 8, 2013
  2. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,803
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello :)

    It's not abnormal to see this alert, and it does not indicate an issue with your system. It's to indicate the loss of a packet during the connection (not necessarily your own connection). You can search for the term "nf_ct_ftp: dropping packet" on a search engine and see several results from other users asking about this message for more information.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #2 cPanelMichael, Nov 8, 2013
  3. sneader

    sneader Well-Known Member

    Joined:
    Aug 21, 2003
    Messages:
    1,155
    Likes Received:
    39
    Trophy Points:
    178
    Location:
    La Crosse, WI
    cPanel Access Level:
    Root Administrator
    Hi Michael. I have this issue also. The message is fine... the problem is that it's output to the console instead of to /var/log/messages. There are some other threads on this, but I admit I have not absorbed them all and I still have this same issue on several of my boxes. Maybe there is a solution out there. It only seems to affect FTP logging.

    - Scott
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #3 sneader, Dec 15, 2013
  4. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,803
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    The message itself does not stem from a cPanel process. It's more of a Kernel/OS/Firewall issue. There is a thread on this here:

    Seems to be an attack - nf_ct_ftp

    However, you have replied to that thread already. Searching for "nf_ct_ftp" yields several results on search engines.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #4 cPanelMichael, Dec 16, 2013
  5. sneader

    sneader Well-Known Member

    Joined:
    Aug 21, 2003
    Messages:
    1,155
    Likes Received:
    39
    Trophy Points:
    178
    Location:
    La Crosse, WI
    cPanel Access Level:
    Root Administrator
    Hi Michael. Yep, have wasted quite a bit of time on this. It may not be cPanel's "fault" but often times we find solutions to our hosting/server issues here in this forum. Bottom line is that there seem to be a lot of cPanel server admins with this same problem, and I've never seen a solution to the problem anywhere (here or elsewhere).

    What's especially annoying is that END USERS also see these alerts! i.e. any valid user that happens to be SSH'd into the server, also sees these firewall alerts. Not very cool.

    - Scott
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #5 sneader, Dec 16, 2013
(You must log in or sign up to post here.)
Loading...
Similar Threads - Message syslogd
  1. thepaperdragon

    Mail delivery failed: returning message to sender

    thepaperdragon, Oct 16, 2018 at 12:22 AM, in forum: E-mail Discussion
    Replies:
    3
    Views:
    69
    Sky Media
    Oct 18, 2018 at 4:42 AM
  2. ad682005

    Messages get automatically deleted from exim queue without retry

    ad682005, Sep 30, 2018, in forum: E-mail Discussion
    Replies:
    2
    Views:
    90
    cPanelLauren
    Oct 4, 2018
  3. whmuser714

    Sign generated bounce messages

    whmuser714, Sep 8, 2018, in forum: E-mail Discussion
    Replies:
    2
    Views:
    117
    whmuser714
    Sep 14, 2018
  4. infocenter

    Relay SMTP messages to Office 365 / Smart Host

    infocenter, Sep 7, 2018, in forum: E-mail Discussion
    Replies:
    8
    Views:
    274
    cPanelMichael
    Sep 17, 2018
  5. rorisang

    Mail delivery failed: returning message to sender

    rorisang, Sep 5, 2018, in forum: E-mail Discussion
    Replies:
    7
    Views:
    327
    cPanelLauren
    Sep 7, 2018

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice