Very frequent "log_in_vain" messages

Kevin Oberman rkoberman at gmail.com
Fri Aug 17 23:33:32 UTC 2018


On any given day I log betwen 30 and several hundred messages similar to
this:
TCP: [137.200.39.19]:443 to [192.168.1.5]:39576 tcpflags 0x12<SYN,ACK>;
tcp_input: Connection attempt to closed port

The remote port is always 80 or 443. They usually show up in bursts of over
a dozen, probably re-transmits. They come feom a variety of sources; in
this case the Social Security Administration, with which I have been in
contact.

I am running 11-Stable and started getting these  several months ago. I
neglected to note just when, but probably after 11.1-RELEASE, but well
before 11.2-RELEASE.

This may be FreeBSD, but it may also be tied to Firefox.

Is anyone else seeing this? I'm not sure how common it is to run
log_in_vain, so it may be common, but little noticed.

Thanks for any clues about this.
--
Kevin Oberman, Part time kid herder and retired Network Engineer
E-mail: rkoberman at gmail.com
PGP Fingerprint: D03FB98AFA78E3B78C1694B318AB39EF1B055683


More information about the freebsd-net mailing list