求救：Syslog 的訊息

[gulin]

我用syslog 發現有PC 一直發138的封包，被3300v擋下，訊息如下

134syslog: OCT 5 8:39:26Vigor3300Alarm:2,1,3,DoS fraggle Block 00:0d:60:dd:03:d5/192.168.0.61:138 -> ff:ff:ff:ff:ff:ff/192.168.0.255:138 PR udp len 20 238^M 
134syslog: OCT 5 8:39:29Vigor3300Alarm:2,1,3,DoS fraggle Block 00:09:6b:55:f9:8c/192.168.0.60:138 -> ff:ff:ff:ff:ff:ff/192.168.0.255:138 PR udp len 20 229^M 
134syslog: OCT 5 8:39:35Vigor3300Alarm:2,1,3,DoS fraggle Block 00:0d:60:dd:03:d5/192.168.0.61:138 -> ff:ff:ff:ff:ff:ff/192.168.0.255:138 PR udp len 20 238^M 
134syslog: OCT 5 8:39:47Vigor3300Alarm:2,1,3,DoS fraggle Block 00:0d:60:dd:03:d5/192.168.0.61:138 -> ff:ff:ff:ff:ff:ff/192.168.0.255:138 PR udp len 20 238^M 
134syslog: OCT 5 8:39:50Vigor3300Alarm:2,1,3,DoS fraggle Block 00:09:6b:55:f9:8c/192.168.0.60:138 -> ff:ff:ff:ff:ff:ff/192.168.0.255:138 PR udp len 20 229^M 
134syslog: OCT 5 8:39:56Vigor3300Alarm:2,1,3,DoS fraggle Block 00:0d:60:dd:03:d5/192.168.0.61:138 -> ff:ff:ff:ff:ff:ff/192.168.0.255:138 PR udp len 20 238^M 
134syslog: OCT 5 8:40:24Vigor3300Alarm:2,1,3,DoS fraggle Block 00:0d:60:dd:03:d5/192.168.0.61:138 -> ff:ff:ff:ff:ff:ff/192.168.0.255:138 PR udp len 20 238^M 
134syslog: OCT 5 8:40:27Vigor3300Alarm:2,1,3,DoS fraggle Block 00:09:6b:55:f9:8c/192.168.0.60:138 -> ff:ff:ff:ff:ff:ff/192.168.0.255:138 PR udp len 20 229^M 
134syslog: OCT 5 8:40:36Vigor3300Alarm:2,1,3,DoS fraggle Block 00:0d:60:dd:03:d5/192.168.0.61:138 -> ff:ff:ff:ff:ff:ff/192.168.0.255:138 PR udp len 20 238^M 
134syslog: OCT 5 8:40:39Vigor3300Alarm:2,1,3,DoS fraggle Block 00:09:6b:55:f9:8c/192.168.0.60:138 -> ff:ff:ff:ff:ff:ff/192.168.0.255:138 PR udp len 20 229^M 

這兩台PC 都經過掃毒，也沒發現任何狀況，後來乾脆系統重裝，仍然發生同樣問題。

我也找不到原因為何？有人可以解救一下嗎？

[門神]

用那一套防毒掃的 ^^

[gulin]

Symantec..

[門神]

用小紅傘試試 !!

www.free-av.com

[gulin]

用Antivir掃過，沒有發現任何病毒。

[gulin]

昨天把Firewall 電源關閉，然後在開機，今天早上看Syslog，已經沒有138的封包，真是怪～～

[gulin]

我發現又有其他的電腦在發137 的封包，跟之前138有相同的狀況，網路會斷線，所有掃毒工具，掃木馬程式都用了，有找的就殺掉，狀況仍然無法改善？

還有沒有其他的方法？


134syslog: OCT 12 14:32:35Vigor3300Alarm:2,1,3,DoS fraggle Block 00:1a:64:06:fa:cd/192.168.0.7:137 -> ff:ff:ff:ff:ff:ff/192.168.0.255:137 PR udp len 20 78^M 
134syslog: OCT 12 14:32:50Vigor3300Alarm:2,1,3,DoS fraggle Block 00:1a:64:06:fa:cd/192.168.0.7:137 -> ff:ff:ff:ff:ff:ff/192.168.0.255:137 PR udp len 20 78^M 
134syslog: OCT 12 14:34:48Vigor3300Alarm:2,1,3,DoS fraggle Block 00:1a:64:06:fa:cd/192.168.0.7:137 -> ff:ff:ff:ff:ff:ff/192.168.0.255:137 PR udp len 20 78^M 
134syslog: OCT 12 14:55:17Vigor3300Alarm:2,1,3,DoS fraggle Block 00:1a:64:06:fa:cd/192.168.0.7:137 -> ff:ff:ff:ff:ff:ff/192.168.0.255:137 PR udp len 20 78^M 

[門神]

重新安裝是否OK !!

[hiksdcpc]

我也遇到這個問題囉==
134syslog: JAN 2 19:2:19Vigor3300Alarm:2,1,3,DoS fraggle Block 00:11:2f:4a:8d:e0/192.168.11.163:138 ->
狂發送封包，去163這台掃毒掃到一個已清除，還是一樣的狀況
不知道gulin怎麼解決的????

[門神]

Vigor 昇級重開機之後就沒看見了 !!

[hiksdcpc]

另有一問題請教為什麼我的3300v syslog永遠只能看到防火牆資訊
流量或是其它完全看不到，試過接上2950就可以收到，但是3300v就不行
另請教一下qno 330 穩定度是否可以承載50~80台pc
對居易有點灰心
謝謝你撥空回答

[門神]

^^很多人反應過

他們應該會處理 !!