Strange log entries

[Adrian Walters <adrian na dhs org>]

recently i have been seeing a lot of strange messages in my log files.

shoul i be worried that there are entries like the one below or is this
typical tcp/ip behavior?

Packet log: input REJECT eth1 PROTO=17 0.0.0.0:68 255.255.255.255:67 L=328
S=0x00 I=0 F=0x0000 T=128 (#25)
Packet log: input REJECT eth1 PROTO=17 0.0.0.0:68 255.255.255.255:67 L=332
S=0x00 I=256 F=0x0000 T=128 (#25)
Packet log: input REJECT eth1 PROTO=17 0.0.0.0:68 255.255.255.255:67 L=328
S=0x00 I=0 F=0x0000 T=128 (#25)
Packet log: input REJECT eth1 PROTO=17 0.0.0.0:68 255.255.255.255:67 L=328
S=0x00 I=0 F=0x0000 T=128 (#25)
Packet log: input REJECT eth1 PROTO=17 0.0.0.0:68 255.255.255.255:67 L=328
S=0x00 I=0 F=0x0000 T=128 (#25)

also is it typical for a webserver to try and scan your netbios port?


Packet log: input REJECT eth1 PROTO=6 209.27.59.52:3375 138.89.13.118:139
L=44 S=0x00 I=29764 F=0x4000 T=16 SYN (#24)
Packet log: input REJECT eth1 PROTO=6 209.27.59.52:3375 138.89.13.118:139
L=44 S=0x00 I=36164 F=0x4000 T=16 SYN (#24)
Packet log: input REJECT eth1 PROTO=6 209.27.59.52:3375 138.89.13.118:139
L=44 S=0x00 I=43332 F=0x4000 T=16 SYN (#24)
Packet log: input REJECT eth1 PROTO=6 209.27.59.52:3375 138.89.13.118:139
L=44 S=0x00 I=2117 F=0x4000 T=16 SYN (#24)