Log spam: Limiting * response from 1 to 200 packets/sec

[Michael Butler]

On 12/13/16 11:15, Gary Palmer wrote:
> On Tue, Dec 13, 2016 at 10:43:27AM -0500, Michael Butler wrote:
>> On 12/13/16 10:29, Dimitry Andric wrote:
>>
>>> Somebody is most likely port scanning your machines.  I see this all the
>>> time on boxes connected to the internet.
>>
>> As are mine. I wouldn't mind so much if the message contained sufficient
>> useful information that could be acted on, e.g. originating IP address
>> and, when appropriate, destination port.
>
> sysctl net.inet.tcp.log_in_vain=1
> sysctl net.inet.udp.log_in_vain=1
>
> be prepared for a lot of logs if you are being port scanned

Or, apparently, have a windoze box on that segment :-(

	Michael