Log spam: Limiting * response from 1 to 200 packets/sec

[Gary Palmer]

On Tue, Dec 13, 2016 at 10:43:27AM -0500, Michael Butler wrote:
> On 12/13/16 10:29, Dimitry Andric wrote:
> 
> > Somebody is most likely port scanning your machines.  I see this all the
> > time on boxes connected to the internet.
> 
> As are mine. I wouldn't mind so much if the message contained sufficient 
> useful information that could be acted on, e.g. originating IP address 
> and, when appropriate, destination port.

sysctl net.inet.tcp.log_in_vain=1
sysctl net.inet.udp.log_in_vain=1

be prepared for a lot of logs if you are being port scanned

Regards,

Gary