Firewall traffic question

Hey guys, I found a bunch of these events in my PIX FW logs. Any one know what they mean?
Am I under attack?? This is only a small sample of them but you can see that there are some suspicious acitvity even from this small sample. There seems to be a lot of activity from 63.210.62.8x.

1 09/12/05 09:49:43 09/12/05 11:13:30 3-106011 Deny inbound (No xlate) udp src outside:199.181.135.4/nnnn dst outside:xxx.xxx.xxx.142/nnnn 261

2 09/12/05 09:54:16 09/12/05 11:17:45 3-106011 Deny inbound (No xlate) udp src outside:208.42.224.238/nnnn dst outside:xxx.xxx.xxx.142/nnnn 155

3 09/12/05 09:49:56 09/12/05 11:17:20 3-106011 Deny inbound (No xlate) tcp src outside:63.210.62.87/80 dst outside:xxx.xxx.xxx.142/nnnn 125

4 09/12/05 09:49:44 09/12/05 11:18:07 3-106011 Deny inbound (No xlate) tcp src outside:63.210.62.86/80 dst outside:xxx.xxx.xxx.142/nnnn 112

5 09/12/05 09:54:06 09/12/05 11:17:40 3-106011 Deny inbound (No xlate) udp src outside:208.42.224.236/nnnn dst outside:xxx.xxx.xxx.142/nnnn 99

6 09/12/05 09:57:54 09/12/05 11:12:40 3-106011 Deny inbound (No xlate) tcp src outside:63.210.62.88/80 dst outside:xxx.xxx.xxx.142/nnnn 91

...
...

13 09/12/05 09:54:56 09/12/05 11:16:03 3-106011 Deny inbound (No xlate) tcp src outside:63.210.62.81/80 dst outside:xxx.xxx.xxx.142/nnnn

...
...

18 09/12/05 10:12:25 09/12/05 11:17:46 3-106011 Deny inbound (No xlate) tcp src outside:63.210.62.89/80 dst outside:xxx.xxx.xxx.142/nnnn

Well, no one has answered in almost three hours, so maybe I can get the ball rolling.

Quote:

but you can see that there are some suspicious acitvity even from this small sample.

Well, I don't use or know PIX FW, but I see nothing suspicious, especially since you sanitized the ports being probed.

Sanitize your IP addresses when posting, that is always a good idea. But not the ports, especially since it was denied by the firewall.

BTW. what is box xxx.xxx.xxx.142 ?

Since all the traffic seems destined ( Nated ) there it might also be helpful to know what services are running ( or are supposed to be running )

It isn't a proxy server is it?

Don't ask why I asked that, I don't know, it just came out. :drink:

Previewed the post.. First of all the internal addresses xxx.xxx.xxx.142 shows that they are masked (but not NATed) or PIX has logged them in this way...

One more thing notice the nnnn phrase in each entry of the log .. the internal addresses are shown as xxx.xxx.xxx.142/nnnn.. THis is showing a service that must have been installled on ur machine... are you visiting news distribution network sites from this PC..

Anywayz my search results for nnnn have given me these pointers

http://glinden.blogspot.com/2005/01/...s-network.html

http://www.nearestneighbor.net/log/

It is all happening because some RSS feed gathering software is installed on your machine but your firewall is not configured to accept such traffic.

NOw about the source addresses 208.42.224.23x and 63.210.62.8x .

Notice that in your firewall's logs the ports on these machines as either nnnn or 80..
So there is nothing to panic.. your machine seems to be getting contacted by these Nearest Neighbourhood News Network servers. My tracert and whois results tell me that these IPs are present in Washington area... of course... the same NNNN project is under development at the same place.. You may view the links above for further details.

You have posted results only of five minutes operation . I can give you any further assistance if you can post more thorough logged results ... spanning longer duration of time.

Quote:

xxx.xxx.xxx.142 shows that they are masked (but not NATed)

Quote:

Anywayz my search results for nnnn have given me these pointers

Just ****ing shoot me !!

Gixxer: sanatise your logs, change your internal ip addresses to something like a.a.a.a and b.b.b.b but leave the ports in the logs... Can't tell anything from this except you're using NAT and the PIX doesn't have a session for that perticular traffic. Could be a time-out, could be anything..

Just something that popped up.. fail-over config? You may have some statefull failover problems:
http://www.cisco.com/en/US/products/...275.html#10849

Edit: Crap.. That long url bug still seems to be alive.. You may need to edit the url above.. There's an
in there somewhere that shouldn't be there.

Quote:

what does " No xlate " mean? If I am wrong I will appologize, publically, but isn't that the port number and not a service?

- contact user about this assignment: AP Poster: IKnowNot

Hey man, whats gone wrong.... "Noxlate" in the above post is certainly not the port number.. neither it is the name of the service running on the machine.

Below I post some more results of PIX firewall..

Quote:

10:41:41 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
10:41:35 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
10:31:22 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
10:31:16 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
10:31:10 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
10:31:04 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
10:20:57 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
10:20:51 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
10:20:45 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
10:20:39 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
10:10:33 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
10:10:27 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
10:10:21 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
10:10:15 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
10:00:09 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
10:00:03 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:59:57 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:59:51 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:49:45 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:49:39 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:49:33 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:49:27 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:39:21 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:39:15 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:39:09 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:39:03 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:28:57 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:28:51 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:28:45 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:28:39 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:18:33 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:18:27 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:18:21 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:18:15 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:08:09 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:08:03 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:07:57 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
09:07:51 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161
08:57:45 %PIX-3-106011: Deny inbound (No xlate) udp src inside:ts_pog2/1027 dst inside:195.86.130.8/161

See port numbers are always succeeding the IP addresses with the slash(/) mark both for source as well as destination machines.
What "No Xlate" phrase exactly means is not clear.. but I feel this has something to do with the protocol.

Also service's process Id no. is their in the original post ... it is in the end of each log entry in original post..

There is some more about the Xlate command

http://www.cisco.com/en/US/products/...html#wp1084248

Digging a bit deeper into the matter

Quote:

Examples
The following is sample output from the show xlate command with three active Port Address Translations (PATs):

pixfirewall(config)# show xlate

3 in use, 3 most used

PAT Global 192.150.49.1(0) Local 10.1.1.15 ICMP id 340

PAT Global 192.150.49.1(1024) Local 10.1.1.15(1028)

PAT Global 192.150.49.1(1024) Local 10.1.1.15(516)

The following is sample output from the show xlate detail command with three active Port Address Translations (PATs):

pixfirewall(config)# show xlate detail

3 in use, 3 most used

Flags: D - DNS, d - dump, I - identity, i - inside, n - no random,

o - outside, r - portmap, s - static

TCP PAT from inside:10.1.1.15/1026 to outside:192.150.49.1/1024 flags ri

UDP PAT from inside:10.1.1.15/1028 to outside:192.150.49.1/1024 flags ri

ICMP PAT from inside:10.1.1.15/21505 to outside:192.150.49.1/0 flags ri

Xlate is used for Port Address Translation or Network Address Translation .... So "NoXlate" in the above posted logs mean that NAT or PAT not used in the firewall logs.

Wasnt it unjust negging IKnowNot.

your going to drive yourself crazy looking at what your firewall is denying 'in'. worms scriptkiddies and what not is a never ending story. a bunch of ugly nasties out there. what you need to watch is what the traffic getting threw is doing. if its not being allowed into your network it's no trouble to you.

gauravjulka said:

Quote:

Wasnt it unjust negging IknowNot.

( referring to me negging him )

NO.

and no apologies

Sorry for the confusion, ...

Quote:

what does " No xlate " mean?

refers to the NAT

Quote:

... but isn't that the port number and not a service?

meant ( should have spelled it out this way ) ... but isn't "nnnn" the port number and not a service?

Now go back and re-read your initial post ...

Wow, what a day today not even a chance for me to get back and check my own thread. Let me start by thanking everyone for their help. hopefully I can clarify some of the confusion. Forgive me if I get a little confused myself with this stuff as I am no expert.

OK, I had some time tonight to play around with the program that is I was using to analyze the FW log data. The program itself ( firegen ) santizes the port numbers for the following reason ( scroll to the consolidate port numbers section ) I have since changed this feature.

Let me answer some questions that we posed:

xxx.xxx.xxx.142 is the ip address that everyone in the company uses to get out to the internet. This is the entry for it in the FW config is: global (outside) 1 xxx.xxx.xxx.142

Here is some more data from tonight's log file. Looks like im really getting beat up on 6346 from a number of sources.

Quote:

2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:67.33.114.224/50273 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:84.128.239.92/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:24.98.134.56/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:210.213.130.130/12257 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:82.31.153.88/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:82.31.153.88/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:67.33.114.224/50273 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:70.111.237.143/50087 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:200.11.153.136/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:84.222.134.38/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:84.101.226.68/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:84.222.134.38/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:216.200.68.2/39042 dst outside:xxx.xxx.xxx.142/53
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:70.182.82.214/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:70.182.82.214/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:83.115.125.28/34097 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:209.133.111.2/18821 dst outside:xxx.xxx.xxx.142/53
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:80.184.107.27/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:200.11.153.136/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:84.94.126.126/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:210.213.130.130/12257 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:84.112.5.73/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:87.242.151.203/12678 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:200.213.238.160/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.164.185.129/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:67.172.72.56/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.179.217.112/30505 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:67.172.72.56/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:80.66.32.242/2566 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:24.231.41.178/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:83.156.29.73/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:07,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.83.21.114/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.240.17.92/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:83.116.72.162/15030 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:201.243.58.147/6846 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.207.63.25/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:84.94.126.126/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:201.243.0.17/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.63.117.32/51713 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:193.255.0.170/18642 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:154.20.115.11/60082 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:200.140.85.52/18090 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:200.103.241.19/50619 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:200.121.208.62/14882 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:71.110.231.189/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:83.199.109.123/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:24.127.123.240/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:71.136.100.62/20240 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:213.103.103.35/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:67.190.130.76/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:46: %PIX-3-106011: Deny inbound (No xlate) udp src outside:24.109.15.230/16980 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:85.89.162.214/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:85.103.39.103/18028 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:200.141.243.67/61257 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.207.230.123/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:64.108.222.200/20371 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:200.160.97.134/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:72.16.47.112/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.179.119.5/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:200.217.102.39/50255 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:84.191.198.42/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.247.171.92/18451 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.138.139.46/19210 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:221.128.186.59/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.208.106.65/57975 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:70.177.67.145/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.251.192.229/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:84.81.130.18/13677 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:62.205.67.102/62776 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:212.179.227.135/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:84.98.190.100/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:85.49.73.223/30378 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:213.37.233.155/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:24.59.247.117/60882 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:201.9.207.61/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:217.136.160.185/11201 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:83.134.162.44/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:201.9.207.61/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:24.43.151.147/26902 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:213.54.147.63/37070 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:80.100.91.154/27497 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:84.98.202.116/29170 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:200.126.237.165/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.202.1.218/2035 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:166.82.50.177/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:200.97.239.107/30901 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:84.190.40.21/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:62.34.101.83/21713 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:85.103.39.103/18028 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.202.1.218/2035 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.210.200.102/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:12.227.142.177/12138 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:212.195.118.238/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:24.232.48.10/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:62.141.203.73/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:213.54.147.63/37070 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:82.65.26.176/38546 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:08,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:151.51.83.219/50518 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.211.139.46/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:131.94.144.210/10663 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:131.94.144.210/10663 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:86.133.40.133/1083 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.56.120.142/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.56.120.142/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.196.66.240/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:65.4.255.233/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:82.237.13.93/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:47: %PIX-3-106011: Deny inbound (No xlate) udp src outside:86.133.40.133/1083 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:63.199.230.157/3143 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:83.156.242.142/11287 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:84.99.39.232/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.106.40.147/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:83.30.191.119/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:200.227.70.82/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:86.133.40.133/1083 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:84.104.122.237/60437 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:86.133.40.133/1083 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.186.169.242/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.196.66.240/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.69.206.207/2629 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.186.169.242/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.181.84.149/33509 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:24.130.140.11/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:64.156.240.34/45387 dst outside:xxx.xxx.xxx.142/53
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:62.141.203.73/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:62.141.203.73/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:86.134.15.247/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:24.130.140.11/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:213.254.248.2/37993 dst outside:xxx.xxx.xxx.142/53
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:84.102.139.61/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:201.138.38.207/30113 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:204.8.49.2/39651 dst outside:xxx.xxx.xxx.142/53
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:193.255.0.170/18642 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:151.46.155.125/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:38.112.76.122/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:150.174.46.189/24544 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:216.183.96.100/11564 dst outside:xxx.xxx.xxx.142/33437
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:208.185.219.166/3159 dst outside:xxx.xxx.xxx.142/53
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:83.196.239.196/14702 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:63.150.141.2/22597 dst outside:xxx.xxx.xxx.142/53
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:83.196.239.196/14702 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:71.109.20.237/20641 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:38.112.76.122/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:213.58.32.161/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:166.90.213.130/45807 dst outside:xxx.xxx.xxx.142/53
2005-09-13 17:00:09,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.251.249.195/6892 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.210.200.102/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:71.110.231.189/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.181.84.149/33509 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.196.66.240/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.181.84.149/33509 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:201.243.58.147/6846 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.181.84.149/33509 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:201.138.38.207/30113 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:48: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.181.84.149/33509 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:80.202.79.216/60631 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:212.139.163.176/34104 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:84.128.239.92/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:213.58.32.161/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:62.205.67.102/62776 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:82.230.59.32/34921 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:200.165.194.202/62621 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:87.242.151.203/12678 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.187.36.87/3016 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:80.66.32.242/2566 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:200.97.239.107/30901 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:156.34.59.128/20689 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:84.112.5.73/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:24.208.177.237/4580 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:83.44.48.182/16250 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:83.156.29.73/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:24.231.41.178/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:24.98.134.56/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:83.44.48.182/16250 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:201.144.107.119/35227 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:83.199.109.123/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.196.66.240/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:82.216.136.197/11772 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.207.63.25/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:84.81.130.18/13677 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.69.206.207/2629 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:213.103.103.35/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.211.139.46/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:219.180.2.24/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:62.234.134.211/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:72.16.47.112/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.64.38.40/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.64.38.40/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:212.244.127.105/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:84.191.198.42/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:86.134.15.247/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:24.127.123.240/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:71.136.100.62/20240 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.106.40.147/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:82.230.59.32/34921 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.181.84.149/33509 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:213.58.32.161/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:65.4.255.233/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:12.227.142.177/12138 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.179.119.5/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:24.43.151.147/26902 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.179.217.112/30505 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:85.124.20.65/1070 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:64.108.222.200/20371 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.247.171.92/18451 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:196.206.207.150/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:80.202.79.216/60631 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:67.190.130.76/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:154.20.115.11/60082 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:70.18.76.149/50068 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:70.177.67.145/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:212.68.240.143/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.39.15.178/19752 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:62.141.203.73/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.208.106.65/57975 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:24.122.28.157/22560 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:200.121.208.62/14882 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:83.30.191.119/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:80.100.91.154/27497 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:63.199.230.157/3143 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:201.29.145.227/6346 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:72.27.34.40/39968 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:24.208.83.133/7775 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:172.211.12.158/28241 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:24.208.83.133/7775 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:64.231.8.44/61143 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:202.59.111.110/19444 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.63.117.32/51713 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:62.34.101.83/21713 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:81.208.74.177/49378 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:82.216.136.197/11772 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:217.136.160.185/11201 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:84.104.122.237/60437 dst outside:xxx.xxx.xxx.142/6346
2005-09-13 17:00:10,Local7.Error,10.10.8.13,Sep 13 2005 16:58:49: %PIX-3-106011: Deny inbound (No xlate) udp src outside:83.134.162.44/6346 dst outside:xxx.xxx.xxx.142/6346

simply little google search show that it looks like 6346 is used by the Gnutella network to share P-2-P data.

So let me ask the question. If a user on our network is running Limewire ( or any other P-2-P progs ), they can connect to the Gnutella network but it seems that when someone else on the Gnutella network tries to download files from there machine it gets blocked. Am I correct in the way that I am interperting this traffic.

thoughts?

Shareaza, Limewire, Gnutella and BearShare all use 6346. i dont use any of them but it's my understanding that your IP addy hets added to a list of hosts when you sign on so it looks like your probably right

if i were you id check xxx.xxx.xxx.142 to see what ports it does have open and check the running processes on that machine to see if one of these bad boys is running. id be dammed if id let someone's want of warez or mp3s endanger my job.

BTW you can check the running processes on a remote machine on your network from your own box by using pslist.com from systernals.com. you need to be logged on with admin rights on the network or use the admin password.