大家帮忙看看我是不是被攻击了？？

debianor

这是syslog里的不分信息：
Dec 16 13:51:19 localhost kernel: Inbound IN=eth0 OUT= MAC=00:40:46:50:13:b4:00:e0:fc:0f:66:37:08:00 SRC=219.133.49.192 DST=192.168.28.3 LEN=100 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=UDP SPT=8000 DPT=4000 LEN=80
Dec 16 13:51:19 localhost kernel: Inbound IN=eth0 OUT= MAC=00:40:46:50:13:b4:00:e0:fc:0f:66:37:08:00 SRC=60.31.255.202 DST=192.168.28.3 LEN=82 TOS=0x00 PREC=0x00 TTL=107 ID=20953 PROTO=UDP SPT=4899 DPT=20564 LEN=62
Dec 16 13:51:21 localhost kernel: Inbound IN=eth0 OUT= MAC=00:40:46:50:13:b4:00:e0:fc:0f:66:37:08:00 SRC=60.31.255.202 DST=192.168.28.3 LEN=60 TOS=0x00 PREC=0x00 TTL=107 ID=21468 PROTO=UDP SPT=4899 DPT=20564 LEN=40
Dec 16 13:51:22 localhost kernel: Inbound IN=eth0 OUT= MAC=00:40:46:50:13:b4:00:e0:fc:0f:66:37:08:00 SRC=61.138.212.2 DST=192.168.28.3 LEN=113 TOS=0x00 PREC=0x00 TTL=119 ID=59544 PROTO=ICMP TYPE=3 CODE=3 [SRC=192.168.28.3 DST=61.138.212.2 LEN=85 TOS=0x00 PREC=0x00 TTL=120 ID=4462 PROTO=UDP SPT=20564 DPT=6809 LEN=65 ]
Dec 16 13:51:22 localhost kernel: Inbound IN=eth0 OUT= MAC=00:40:46:50:13:b4:00:e0:fc:0f:66:37:08:00 SRC=222.88.33.34 DST=192.168.28.3 LEN=113 TOS=0x00 PREC=0x00 TTL=240 ID=37617 PROTO=ICMP TYPE=3 CODE=3 [SRC=192.168.28.3 DST=222.88.33.34 LEN=85 TOS=0x00 PREC=0x00 TTL=114 ID=4454 PROTO=UDP SPT=20564 DPT=6893 LEN=65 ]
Dec 16 13:51:22 localhost kernel: Inbound IN=eth0 OUT= MAC=00:40:46:50:13:b4:00:e0:fc:0f:66:37:08:00 SRC=61.144.243.61 DST=192.168.28.3 LEN=113 TOS=0x00 PREC=0x00 TTL=49 ID=51669 PROTO=ICMP TYPE=3 CODE=3 [SRC=192.168.28.3 DST=61.144.243.61 LEN=85 TOS=0x00 PREC=0x00 TTL=115 ID=4469 PROTO=UDP SPT=20564 DPT=2920 LEN=65 ]
Dec 16 13:51:22 localhost kernel: Inbound IN=eth0 OUT= MAC=00:40:46:50:13:b4:00:e0:fc:0f:66:37:08:00 SRC=60.31.255.202 DST=192.168.28.3 LEN=60 TOS=0x00 PREC=0x00 TTL=107 ID=21654 PROTO=UDP SPT=4899 DPT=20564 LEN=40
Dec 16 13:51:22 localhost kernel: Inbound IN=eth0 OUT= MAC=00:40:46:50:13:b4:00:e0:fc:0f:66:37:08:00 SRC=59.64.204.219 DST=192.168.28.3 LEN=941 TOS=0x00 PREC=0x00 TTL=47 ID=10302 PROTO=UDP SPT=7246 DPT=20564 LEN=921
Dec 16 13:51:22 localhost kernel: Inbound IN=eth0 OUT= MAC=00:40:46:50:13:b4:00:e0:fc:0f:66:37:08:00 SRC=59.32.114.18 DST=192.168.28.3 LEN=957 TOS=0x00 PREC=0x00 TTL=48 ID=58525 PROTO=UDP SPT=5382 DPT=20564 LEN=937
Dec 16 13:51:22 localhost kernel: Inbound IN=eth0 OUT= MAC=00:40:46:50:13:b4:00:e0:fc:0f:66:37:08:00 SRC=221.6.29.79 DST=192.168.28.3 LEN=113 TOS=0x00 PREC=0x00 TTL=45 ID=37592 PROTO=ICMP TYPE=3 CODE=3 [SRC=192.168.28.3 DST=221.6.29.79 LEN=85 TOS=0x00 PREC=0x00 TTL=110 ID=4397 PROTO=UDP SPT=20564 DPT=2056 LEN=65 ]

Yuri

好象是ICMP包吧.

debianor

那无缘无故为什么会有真么多包啊？

konds

检查一下网卡是否被开为混杂模式了先

wgmaster

网络里面闹病毒了吧