Internet Network Communications

I keep getting broken pipe SSH connection over Starlink Internet and I have a long firewall log

Adam

15 Feb 2026 • 56 min read

We are using Starlink Internet I keep getting a broken pipe early in an SSH terminal session with my server. Is this a known issue with starlink. Does it have something to do with the MTU size or anything like that? Also it seems my firewall logs indicate alot of blocking on this network, is that also a known issue of startlink networks under heavy attack?

ChatGPT said:

Yeah — SSH “broken pipe” on Starlink is a pretty common symptom of Starlink’s link behavior, and it’s usually not MTU.

Why it happens on Starlink (the real reason)

Starlink can have micro-loss + jitter spikes, especially around regular satellite handovers. Geoff Huston’s measurements show latency shifting on a ~15-second cadence (satellite assignment changes), with loss events at switchover and additional loss from obstruction/signal quality/congestion. That kind of short disruption is enough to make an interactive TCP session like SSH look “dead” and get torn down.

Also, even small obstructions can cause brief interruptions; Starlink explicitly calls out that the app’s obstruction map shows blockages and how they affect experience.

Is it MTU?

Usually no for plain SSH. MTU issues tend to show up as connections that “half work” (connects, but hangs when sending/receiving larger packets), especially when a VPN is involved.

That said, you can prove it quickly from your Starlink-side machine:

# Shows discovered path MTU; if you see something weird like 1420/1460 etc, note it.
tracepath -n YOUR_SERVER_IP

# IPv4 DF ping test for 1500-byte MTU path (1472 payload + 28 headers = 1500)
ping -M do -s 1472 -c 3 YOUR_SERVER_IP
# If that fails, step down (1464, 1452, 1440...) until it succeeds.

# If you use IPv6 to the server:
ping -6 -M do -s 1452 -c 3 YOUR_SERVER_IPV6

If you’re also running WireGuard/OpenVPN/etc, then MTU becomes much more likely (because tunnel overhead shrinks usable MTU). But for direct SSH, Starlink’s jitter/micro-outages are the usual culprit.

The fix that helps most: SSH keepalives (client + server)

This doesn’t “fix Starlink,” but it keeps NAT state warm and makes SSH detect a hiccup faster/recover more gracefully.

On your Starlink client (recommended)

Add to ~/.ssh/config:

Host yourserver
  HostName your.server.name.or.ip
  ServerAliveInterval 10
  ServerAliveCountMax 3
  TCPKeepAlive yes

Quick one-off test without editing files:

ssh -o ServerAliveInterval=10 -o ServerAliveCountMax=3 youruser@yourserver

On the server (optional but good)

Edit /etc/ssh/sshd_config:

ClientAliveInterval 30
ClientAliveCountMax 3

Then:

sudo systemctl restart ssh

Lots of people hit the exact “client_loop: send disconnect: Broken pipe” pattern and resolve it with these keepalive settings.

Best “Starlink-proof” solution: MOSH or a VPN overlay

If you want this to feel solid even with micro-dropouts:

MOSH (UDP-based roaming shell) is designed to survive brief link drops and changing paths.
Or run WireGuard between your Starlink side and your server, then SSH through the tunnel (and clamp MTU on the tunnel if needed).

(If you tell me your server OS + whether UDP is open/allowed, I’ll give you a clean setup path.)

About your firewall logs: “lots of blocking”

If you mean your server’s firewall is dropping tons of inbound traffic, that’s normal internet background radiation: bots scan everything, brute force SSH, hit random ports, etc.

If you specifically notice many source IPs that belong to Starlink, that doesn’t mean your Starlink is under attack — it usually means:

Starlink is a large ISP, and some customers/hosts are abusive (same as any big network).
Starlink often uses CGNAT/shared IPv4, which can create “bad neighbor” effects and messy reputation/abuse patterns.

The sane hardening move (especially with Starlink’s changing IPs)

Instead of trying to allowlist your Starlink IP (it may change), do one of these:

SSH keys only, disable password auth.
Fail2ban (you likely already have it).
WireGuard-only SSH: bind/allow SSH only on the WG interface so the public internet can’t even knock.

If you paste:

the exact SSH error line you see, and
the output of tracepath -n YOUR_SERVER_IP (and whether you SSH over IPv4 or IPv6),
I can tell you in one shot whether you’re dealing with micro-outages vs MTU vs local Wi-Fi/router state.

You said:

make a really cool looking infographic about this for my blog

You said:

adam@laptop:~$ # Shows discovered path MTU; if you see something weird like 1420/1460 etc, note it. tracepath -n 178.156.185.220 bash: tracepath: command not found adam@laptop:~$ # IPv4 DF ping test for 1500-byte MTU path (1472 payload + 28 headers = 1500) ping -M do -s 1472 -c 3 178.156.185.220 # If that fails, step down (1464, 1452, 1440...) until it succeeds. PING 178.156.185.220 (178.156.185.220) 1472(1500) bytes of data. 1480 bytes from 178.156.185.220: icmp_seq=1 ttl=44 time=94.0 ms 1480 bytes from 178.156.185.220: icmp_seq=2 ttl=44 time=101 ms 1480 bytes from 178.156.185.220: icmp_seq=3 ttl=44 time=153 ms — 178.156.185.220 ping statistics — 3 packets transmitted, 3 received, 0% packet loss, time 2003ms rtt min/avg/max/mdev = 93.977/115.826/152.832/26.309 ms adam@laptop:~$ # If you use IPv6 to the server: ping -6 -M do -s 1452 -c 3 2a01:4ff:f0:cf9f::1 ping: connect: Network is unreachable

ChatGPT said:

Nice — those results basically rule out MTU (for IPv4).

What your tests say

✅ IPv4 MTU is fine

Your DF ping with -s 1472 (1500-byte path) succeeded 3/3 with 0% loss:

That means your path supports at least MTU 1500 end-to-end (no fragmentation needed).
So your SSH “broken pipe” is almost certainly NOT an MTU issue (at least on IPv4, non-VPN).

If this were MTU/PMTUD trouble, that DF ping would usually fail or you’d see weird “works until it doesn’t” behavior with larger packets.

❌ IPv6: your client currently has no IPv6 connectivity

ping -6 … → Network is unreachable means your laptop has no IPv6 route. That’s not a server problem — that’s local network/ISP side.

Run these on the laptop to confirm what you actually have:

ip -6 addr
ip -6 route

If you only see fe80:: addresses and no 2000::/3 global address + default route, you’re not on IPv6 right now.
Starlink can provide IPv6 in many setups, but it’s not guaranteed everywhere and can depend on router mode/config. Either way: your current laptop network path is IPv4-only.

So why the SSH “broken pipe” still happens?

With Starlink, the usual culprit is brief micro-outages / jitter spikes (sat handoffs, obstruction blips, transient congestion). SSH is TCP; if the link stalls long enough, the session can get dropped and you see “broken pipe”.

Do this (it fixes 90% of Starlink SSH pain)

1) Add SSH keepalives on your laptop

~/.ssh/config:

Host yourserver
  HostName 178.156.185.220
  ServerAliveInterval 10
  ServerAliveCountMax 3
  TCPKeepAlive yes

Or one-off:

ssh -o ServerAliveInterval=10 -o ServerAliveCountMax=3 youruser@178.156.185.220

2) (Optional) Add server-side keepalives

On server: /etc/ssh/sshd_config

ClientAliveInterval 30
ClientAliveCountMax 3

Then:

sudo systemctl restart ssh

3) Use MOSH if you want it to feel “unbreakable”

MOSH is made for flaky/roaming links. If UDP is allowed, it’s the smoothest experience on Starlink.

About `tracepath: command not found`

Install it on Debian:

sudo apt update
sudo apt install iputils-tracepath

Then:

tracepath -n 178.156.185.220

Firewall logs “lots of blocking”

That part is usually normal internet background scanning hitting your server from everywhere (including Starlink address ranges sometimes). It does not mean “your Starlink is under heavy attack” so much as “your server is on the internet.”

Two things do make it look noisier:

CGNAT / huge ISP pools: big networks have more “bad neighbors,” so you’ll see more random traffic from those ranges.
If you allowlist your current home IP, Starlink IP changes can cause your own legit attempts to look “new/suspicious” to fail2ban or rules.

If you tell me what firewall stack you’re using (UFW? nftables? fail2ban?) and paste 5–10 sample log lines (with IPs redacted if you want), I’ll tell you if it’s just normal scan-noise or if you’re accidentally blocking yourself.

You said:

I'm using UFW on my Debian 13 laptop. give me the command to audit the log

ChatGPT said:

Use these (they’re safe read-only) on your Debian 13 laptop:

# 1) Confirm logging is on + show UFW status/rules
sudo ufw status verbose

# 2) Where UFW is writing logs (usually /var/log/ufw.log via rsyslog/journald)
sudo ls -lah /var/log/ufw.log*

# 3) Live tail of UFW blocks/denies (most useful)
sudo tail -f /var/log/ufw.log | grep -E "UFW BLOCK|UFW DENY|DPT=|SRC="

If /var/log/ufw.log doesn’t exist on your system, audit via journal instead:

# UFW-related kernel log events (live)
sudo journalctl -k -f | grep -E "UFW BLOCK|UFW DENY"

# Or last 24 hours
sudo journalctl -k --since "24 hours ago" | grep -E "UFW BLOCK|UFW DENY"

If you want a quick “top offenders / top ports” summary from the log:

sudo awk '/UFW (BLOCK|DENY)/{
  for(i=1;i<=NF;i++){
    if($i ~ /^SRC=/){sub("SRC=","",$i); src=$i}
    if($i ~ /^DPT=/){sub("DPT=","",$i); dpt=$i}
  }
  if(src!="") SRC[src]++
  if(dpt!="") DPT[dpt]++
}
END{
  print "Top source IPs:"; for (s in SRC) print SRC[s], s | "sort -nr | head -n 20"
  print "\nTop destination ports:"; for (p in DPT) print DPT[p], p | "sort -nr | head -n 20"
}' /var/log/ufw.log

You said:

I didn't run your 24 hour command because it would have been too long for this post, but I'll take a look later, out of curiosity. adam@laptop:~$ # 1) Confirm logging is on + show UFW status/rules sudo ufw status verbose [sudo] password for adam: Status: active Logging: on (low) Default: deny (incoming), allow (outgoing), disabled (routed) New profiles: skip adam@laptop:~$ # 2) Where UFW is writing logs (usually /var/log/ufw.log via rsyslog/journald) sudo ls -lah /var/log/ufw.log* ls: cannot access '/var/log/ufw.log*': No such file or directory adam@laptop:~$ # 3) Live tail of UFW blocks/denies (most useful) sudo tail -f /var/log/ufw.log | grep -E "UFW BLOCK|UFW DENY|DPT=|SRC=" tail: cannot open '/var/log/ufw.log' for reading: No such file or directory tail: no files remaining adam@laptop:~$ # UFW-related kernel log events (live) sudo journalctl -k -f | grep -E "UFW BLOCK|UFW DENY" Feb 15 22:27:44 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:27:45 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:d0:12:55:30:7b:31:08:00 SRC=192.168.1.33 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:27:48 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:28:20 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=8319 PROTO=2 Feb 15 22:29:52 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:29:53 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:78:55:36:05:20:1a:08:00 SRC=192.168.1.37 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=62461 PROTO=2 Feb 15 22:29:57 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:29:59 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:0b:83:af:d1:a4:08:00 SRC=192.168.1.15 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=25749 PROTO=2 Feb 15 22:30:14 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=20172 PROTO=2 Feb 15 22:30:39 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=29964 PROTO=2 Feb 15 22:31:03 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=60766 PROTO=2 Feb 15 22:31:07 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:0b:83:af:d1:a4:08:00 SRC=192.168.1.15 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=39423 PROTO=2 ^C adam@laptop:~$ sudo awk '/UFW (BLOCK|DENY)/{ for(i=1;i<=NF;i++){ if($i ~ /^SRC=/){sub("SRC=","",$i); src=$i} if($i ~ /^DPT=/){sub("DPT=","",$i); dpt=$i} } if(src!="") SRC[src]++ if(dpt!="") DPT[dpt]++ } END{ print "Top source IPs:"; for (s in SRC) print SRC[s], s | "sort -nr | head -n 20" print "\nTop destination ports:"; for (p in DPT) print DPT[p], p | "sort -nr | head -n 20" }' /var/log/ufw.log awk: fatal: cannot open file /var/log/ufw.log' for reading: No such file or directory adam@laptop:~$

ChatGPT said:

What you’re seeing there isn’t “Starlink under attack.” Those log lines are local Wi-Fi LAN multicast noise (mDNS + IGMP):

DST=224.0.0.251 = mDNS / Bonjour (UDP 5353) from devices on your LAN (192.168.1.x)
DST=224.0.0.1 with PROTO=2 = IGMP membership chatter
TTL=1 = never leaves your local network

Also, your Debian 13 laptop simply isn’t writing UFW logs to /var/log/ufw.log (common when you’re using journald without rsyslog file outputs), so the “audit the log” needs to use journalctl.

Audit UFW blocks in the journal (clean + useful)

Show last 1 hour (quick sanity check)

sudo journalctl -k --since "1 hour ago" -g "UFW (BLOCK|DENY)" --no-pager

Show last 24 hours (your original ask, but pageless)

sudo journalctl -k --since "24 hours ago" -g "UFW (BLOCK|DENY)" --no-pager

Live view

sudo journalctl -k -f -g "UFW (BLOCK|DENY)"

“Real audit” summary: top sources + top destination ports

(Works even though you don’t have /var/log/ufw.log)

sudo journalctl -k --since "24 hours ago" -g "UFW (BLOCK|DENY)" --no-pager |
awk '{
  src=""; dpt="";
  for(i=1;i<=NF;i++){
    if($i ~ /^SRC=/){src=substr($i,5)}
    if($i ~ /^DPT=/){dpt=substr($i,5)}
  }
  if(src!="") SRC[src]++
  if(dpt!="") DPT[dpt]++
}
END{
  print "Top source IPs:";
  for(s in SRC) print SRC[s], s | "sort -nr | head -n 20";
  print "\nTop destination ports:";
  for(p in DPT) print DPT[p], p | "sort -nr | head -n 20";
}'

If you only care about non-local / internet-looking sources

This filters out the LAN chatter (192.168.x.x, 10.x.x.x, 172.16-31.x.x) and the multicast destinations:

sudo journalctl -k --since "24 hours ago" -g "UFW (BLOCK|DENY)" --no-pager |
grep -vE 'SRC=192\.168\.|SRC=10\.|SRC=172\.(1[6-9]|2[0-9]|3[0-1])\.|DST=224\.'

If you run that last filter and you still see tons of public IPs getting blocked, paste ~10 lines (you can redact IPs), and I’ll tell you if it’s normal scan noise or a rule/problem on the laptop.

You said:

adam@laptop:~$ sudo journalctl -k --since "1 hour ago" -g "UFW (BLOCK|DENY)" --no-pager Feb 15 22:00:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC= SRC=192.168.1.216 DST=239.255.255.250 LEN=635 TOS=0x00 PREC=0x00 TTL=1 ID=8191 DF PROTO=UDP SPT=32996 DPT=3702 LEN=615 Feb 15 22:00:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC= SRC=fe80:0000:0000:0000:5cd2:aadb:2a3d:fd79 DST=ff02:0000:0000:0000:0000:0000:0000:000c LEN=655 TC=0 HOPLIMIT=1 FLOWLBL=285815 PROTO=UDP SPT=38069 DPT=3702 LEN=615 Feb 15 22:00:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:00:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=24:ee:9a:81:75:13:50:03:cf:77:21:a9:08:00 SRC=192.168.1.36 DST=192.168.1.216 LEN=1364 TOS=0x00 PREC=0x00 TTL=64 ID=27570 PROTO=UDP SPT=3702 DPT=32996 LEN=1344 Feb 15 22:00:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=24:ee:9a:81:75:13:28:c5:c8:f6:72:1a:08:00 SRC=192.168.1.103 DST=192.168.1.216 LEN=2581 TOS=0x00 PREC=0x00 TTL=64 ID=23991 PROTO=UDP SPT=3702 DPT=32996 LEN=2561 Feb 15 22:00:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=24:ee:9a:81:75:13:28:c5:c8:f6:72:1a:08:00 SRC=192.168.1.103 DST=192.168.1.216 LEN=2581 TOS=0x00 PREC=0x00 TTL=64 ID=23999 PROTO=UDP SPT=3702 DPT=32996 LEN=2561 Feb 15 22:00:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=24:ee:9a:81:75:13:50:03:cf:77:21:a9:08:00 SRC=192.168.1.36 DST=192.168.1.216 LEN=1364 TOS=0x00 PREC=0x00 TTL=64 ID=64606 PROTO=UDP SPT=3702 DPT=32996 LEN=1344 Feb 15 22:00:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=24:ee:9a:81:75:13:28:c5:c8:f6:72:1a:08:00 SRC=192.168.1.103 DST=192.168.1.216 LEN=2581 TOS=0x00 PREC=0x00 TTL=64 ID=24005 PROTO=UDP SPT=3702 DPT=32996 LEN=2561 Feb 15 22:00:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:00:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=24:ee:9a:81:75:13:28:c5:c8:f6:72:1a:08:00 SRC=192.168.1.103 DST=192.168.1.216 LEN=2581 TOS=0x00 PREC=0x00 TTL=64 ID=24021 PROTO=UDP SPT=3702 DPT=32996 LEN=2561 Feb 15 22:00:03 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=24:ee:9a:81:75:13:50:03:cf:77:21:a9:86:dd SRC=fe80:0000:0000:0000:5203:cfff:fe77:21a9 DST=fe80:0000:0000:0000:5cd2:aadb:2a3d:fd79 LEN=1399 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=UDP SPT=3702 DPT=38069 LEN=1359 Feb 15 22:00:03 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=24:ee:9a:81:75:13:50:03:cf:77:21:a9:86:dd SRC=fe80:0000:0000:0000:5203:cfff:fe77:21a9 DST=fe80:0000:0000:0000:5cd2:aadb:2a3d:fd79 LEN=1399 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=UDP SPT=3702 DPT=38069 LEN=1359 Feb 15 22:00:04 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:00:39 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:76:b5:03:e5:1d:c3:08:00 SRC=192.168.1.200 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=55696 PROTO=2 Feb 15 22:01:48 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=33183 PROTO=2 Feb 15 22:02:08 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:02:09 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:f8:e4:e3:0d:04:53:08:00 SRC=192.168.1.111 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=17124 PROTO=2 Feb 15 22:02:09 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:f4:6a:dd:8a:51:7b:08:00 SRC=192.168.1.26 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=59896 PROTO=2 Feb 15 22:02:09 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:02:59 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=27412 PROTO=2 Feb 15 22:03:41 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:76:b5:03:e5:1d:c3:08:00 SRC=192.168.1.200 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=40631 PROTO=2 Feb 15 22:04:08 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=3657 PROTO=2 Feb 15 22:04:17 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:04:17 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:04:17 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:0b:83:af:d1:a4:08:00 SRC=192.168.1.15 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=43037 PROTO=2 Feb 15 22:04:24 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:f8:e4:e3:0d:04:53:08:00 SRC=192.168.1.111 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=17125 PROTO=2 Feb 15 22:04:45 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=6319 PROTO=2 Feb 15 22:06:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=5811 PROTO=2 Feb 15 22:06:11 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:76:b5:03:e5:1d:c3:08:00 SRC=192.168.1.200 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=19624 PROTO=2 Feb 15 22:06:20 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:76:b5:03:e5:1d:c3:08:00 SRC=192.168.1.200 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=62583 PROTO=2 Feb 15 22:06:24 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:06:25 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:a0:29:42:ff:a0:c8:08:00 SRC=192.168.1.72 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=19439 PROTO=2 Feb 15 22:06:40 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:76:b5:03:e5:1d:c3:08:00 SRC=192.168.1.200 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=47464 PROTO=2 Feb 15 22:06:57 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=40608 PROTO=2 Feb 15 22:07:20 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=36692 PROTO=2 Feb 15 22:07:42 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=49733 PROTO=2 Feb 15 22:08:05 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:76:b5:03:e5:1d:c3:08:00 SRC=192.168.1.200 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=41378 PROTO=2 Feb 15 22:08:32 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:08:59 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=42580 PROTO=2 Feb 15 22:08:59 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=23193 PROTO=2 Feb 15 22:09:30 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=32672 PROTO=2 Feb 15 22:10:39 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=24633 PROTO=2 Feb 15 22:10:40 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:10:41 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:d0:12:55:27:0d:29:08:00 SRC=192.168.1.34 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:10:46 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:12:47 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=52201 PROTO=2 Feb 15 22:12:49 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:12:49 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:d0:12:55:27:0d:29:08:00 SRC=192.168.1.34 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:12:55 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:14:c6:7d:8a:ba:a2:08:00 SRC=192.168.1.235 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:12:57 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:13:17 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=57495 PROTO=2 Feb 15 22:13:36 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=34565 PROTO=2 Feb 15 22:14:57 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:14:57 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:f8:e4:e3:0d:04:53:08:00 SRC=192.168.1.111 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=17127 PROTO=2 Feb 15 22:15:00 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:10:6f:d9:de:22:39:08:00 SRC=192.168.1.29 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=44640 PROTO=2 Feb 15 22:15:00 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:15:12 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=48279 PROTO=2 Feb 15 22:15:21 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=23905 PROTO=2 Feb 15 22:16:32 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=25345 PROTO=2 Feb 15 22:16:36 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=26260 PROTO=2 Feb 15 22:17:04 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:17:05 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:78:55:36:05:20:1a:08:00 SRC=192.168.1.37 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=62458 PROTO=2 Feb 15 22:17:05 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:18:39 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=42352 PROTO=2 Feb 15 22:18:58 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=40676 PROTO=2 Feb 15 22:19:11 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=23082 PROTO=2 Feb 15 22:19:12 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:19:13 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:cc:96:e5:0f:fe:ab:08:00 SRC=192.168.1.89 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=23316 PROTO=2 Feb 15 22:19:15 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:19:29 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=46262 PROTO=2 Feb 15 22:19:33 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=31576 PROTO=2 Feb 15 22:20:13 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=11964 PROTO=2 Feb 15 22:20:56 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=29254 PROTO=2 Feb 15 22:21:20 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:21:20 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:cc:96:e5:0f:fe:ab:08:00 SRC=192.168.1.89 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=23319 PROTO=2 Feb 15 22:21:26 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=8782 PROTO=2 Feb 15 22:21:29 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:21:50 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=64510 PROTO=2 Feb 15 22:22:26 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=9504 PROTO=2 Feb 15 22:22:45 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=43512 PROTO=2 Feb 15 22:22:56 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=20111 PROTO=2 Feb 15 22:23:28 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:23:29 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:f4:4e:e3:44:41:02:08:00 SRC=192.168.1.114 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=27283 PROTO=2 Feb 15 22:24:09 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:76:b5:03:e5:1d:c3:08:00 SRC=192.168.1.200 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=56928 PROTO=2 Feb 15 22:24:23 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=24943 PROTO=2 Feb 15 22:24:46 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=54474 PROTO=2 Feb 15 22:25:08 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=45161 PROTO=2 Feb 15 22:25:23 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=60106 PROTO=2 Feb 15 22:25:27 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=5619 PROTO=2 Feb 15 22:25:38 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:26:49 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:10:6f:d9:de:22:39:08:00 SRC=192.168.1.29 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=44661 PROTO=2 Feb 15 22:26:49 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:a0:29:42:ff:a0:c8:08:00 SRC=192.168.1.72 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=19442 PROTO=2 Feb 15 22:27:44 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:27:45 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:d0:12:55:30:7b:31:08:00 SRC=192.168.1.33 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:27:48 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:28:20 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=8319 PROTO=2 Feb 15 22:29:52 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:29:53 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:78:55:36:05:20:1a:08:00 SRC=192.168.1.37 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=62461 PROTO=2 Feb 15 22:29:57 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:29:59 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:0b:83:af:d1:a4:08:00 SRC=192.168.1.15 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=25749 PROTO=2 Feb 15 22:30:14 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=20172 PROTO=2 Feb 15 22:30:39 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=29964 PROTO=2 Feb 15 22:31:03 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=60766 PROTO=2 Feb 15 22:31:07 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:0b:83:af:d1:a4:08:00 SRC=192.168.1.15 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=39423 PROTO=2 Feb 15 22:31:17 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=5654 PROTO=2 Feb 15 22:32:01 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:32:01 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:56:1e:a1:03:f5:de:08:00 SRC=192.168.1.188 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=37895 PROTO=2 Feb 15 22:32:05 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=53844 PROTO=2 Feb 15 22:32:07 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:34:05 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:0b:83:af:d1:a4:08:00 SRC=192.168.1.15 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=64669 PROTO=2 Feb 15 22:34:08 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:34:09 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:34:09 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:f4:6a:dd:8a:51:7b:08:00 SRC=192.168.1.26 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=59900 PROTO=2 Feb 15 22:34:14 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=65411 PROTO=2 Feb 15 22:34:17 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=33447 PROTO=2 Feb 15 22:34:32 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=61887 PROTO=2 adam@laptop:~$ sudo journalctl -k --since "24 hours ago" -g "UFW (BLOCK|DENY)" --no-pager Feb 15 22:00:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC= SRC=192.168.1.216 DST=239.255.255.250 LEN=635 TOS=0x00 PREC=0x00 TTL=1 ID=8191 DF PROTO=UDP SPT=32996 DPT=3702 LEN=615 Feb 15 22:00:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC= SRC=fe80:0000:0000:0000:5cd2:aadb:2a3d:fd79 DST=ff02:0000:0000:0000:0000:0000:0000:000c LEN=655 TC=0 HOPLIMIT=1 FLOWLBL=285815 PROTO=UDP SPT=38069 DPT=3702 LEN=615 Feb 15 22:00:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:00:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=24:ee:9a:81:75:13:50:03:cf:77:21:a9:08:00 SRC=192.168.1.36 DST=192.168.1.216 LEN=1364 TOS=0x00 PREC=0x00 TTL=64 ID=27570 PROTO=UDP SPT=3702 DPT=32996 LEN=1344 Feb 15 22:00:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=24:ee:9a:81:75:13:28:c5:c8:f6:72:1a:08:00 SRC=192.168.1.103 DST=192.168.1.216 LEN=2581 TOS=0x00 PREC=0x00 TTL=64 ID=23991 PROTO=UDP SPT=3702 DPT=32996 LEN=2561 Feb 15 22:00:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=24:ee:9a:81:75:13:28:c5:c8:f6:72:1a:08:00 SRC=192.168.1.103 DST=192.168.1.216 LEN=2581 TOS=0x00 PREC=0x00 TTL=64 ID=23999 PROTO=UDP SPT=3702 DPT=32996 LEN=2561 Feb 15 22:00:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=24:ee:9a:81:75:13:50:03:cf:77:21:a9:08:00 SRC=192.168.1.36 DST=192.168.1.216 LEN=1364 TOS=0x00 PREC=0x00 TTL=64 ID=64606 PROTO=UDP SPT=3702 DPT=32996 LEN=1344 Feb 15 22:00:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=24:ee:9a:81:75:13:28:c5:c8:f6:72:1a:08:00 SRC=192.168.1.103 DST=192.168.1.216 LEN=2581 TOS=0x00 PREC=0x00 TTL=64 ID=24005 PROTO=UDP SPT=3702 DPT=32996 LEN=2561 Feb 15 22:00:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:00:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=24:ee:9a:81:75:13:28:c5:c8:f6:72:1a:08:00 SRC=192.168.1.103 DST=192.168.1.216 LEN=2581 TOS=0x00 PREC=0x00 TTL=64 ID=24021 PROTO=UDP SPT=3702 DPT=32996 LEN=2561 Feb 15 22:00:03 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=24:ee:9a:81:75:13:50:03:cf:77:21:a9:86:dd SRC=fe80:0000:0000:0000:5203:cfff:fe77:21a9 DST=fe80:0000:0000:0000:5cd2:aadb:2a3d:fd79 LEN=1399 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=UDP SPT=3702 DPT=38069 LEN=1359 Feb 15 22:00:03 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=24:ee:9a:81:75:13:50:03:cf:77:21:a9:86:dd SRC=fe80:0000:0000:0000:5203:cfff:fe77:21a9 DST=fe80:0000:0000:0000:5cd2:aadb:2a3d:fd79 LEN=1399 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=UDP SPT=3702 DPT=38069 LEN=1359 Feb 15 22:00:04 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:00:39 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:76:b5:03:e5:1d:c3:08:00 SRC=192.168.1.200 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=55696 PROTO=2 Feb 15 22:01:48 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=33183 PROTO=2 Feb 15 22:02:08 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:02:09 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:f8:e4:e3:0d:04:53:08:00 SRC=192.168.1.111 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=17124 PROTO=2 Feb 15 22:02:09 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:f4:6a:dd:8a:51:7b:08:00 SRC=192.168.1.26 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=59896 PROTO=2 Feb 15 22:02:09 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:02:59 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=27412 PROTO=2 Feb 15 22:03:41 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:76:b5:03:e5:1d:c3:08:00 SRC=192.168.1.200 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=40631 PROTO=2 Feb 15 22:04:08 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=3657 PROTO=2 Feb 15 22:04:17 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:04:17 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:04:17 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:0b:83:af:d1:a4:08:00 SRC=192.168.1.15 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=43037 PROTO=2 Feb 15 22:04:24 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:f8:e4:e3:0d:04:53:08:00 SRC=192.168.1.111 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=17125 PROTO=2 Feb 15 22:04:45 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=6319 PROTO=2 Feb 15 22:06:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=5811 PROTO=2 Feb 15 22:06:11 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:76:b5:03:e5:1d:c3:08:00 SRC=192.168.1.200 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=19624 PROTO=2 Feb 15 22:06:20 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:76:b5:03:e5:1d:c3:08:00 SRC=192.168.1.200 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=62583 PROTO=2 Feb 15 22:06:24 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:06:25 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:a0:29:42:ff:a0:c8:08:00 SRC=192.168.1.72 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=19439 PROTO=2 Feb 15 22:06:40 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:76:b5:03:e5:1d:c3:08:00 SRC=192.168.1.200 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=47464 PROTO=2 Feb 15 22:06:57 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=40608 PROTO=2 Feb 15 22:07:20 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=36692 PROTO=2 Feb 15 22:07:42 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=49733 PROTO=2 Feb 15 22:08:05 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:76:b5:03:e5:1d:c3:08:00 SRC=192.168.1.200 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=41378 PROTO=2 Feb 15 22:08:32 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:08:59 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=42580 PROTO=2 Feb 15 22:08:59 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=23193 PROTO=2 Feb 15 22:09:30 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=32672 PROTO=2 Feb 15 22:10:39 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=24633 PROTO=2 Feb 15 22:10:40 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:10:41 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:d0:12:55:27:0d:29:08:00 SRC=192.168.1.34 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:10:46 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:12:47 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=52201 PROTO=2 Feb 15 22:12:49 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:12:49 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:d0:12:55:27:0d:29:08:00 SRC=192.168.1.34 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:12:55 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:14:c6:7d:8a:ba:a2:08:00 SRC=192.168.1.235 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:12:57 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:13:17 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=57495 PROTO=2 Feb 15 22:13:36 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=34565 PROTO=2 Feb 15 22:14:57 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:14:57 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:f8:e4:e3:0d:04:53:08:00 SRC=192.168.1.111 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=17127 PROTO=2 Feb 15 22:15:00 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:10:6f:d9:de:22:39:08:00 SRC=192.168.1.29 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=44640 PROTO=2 Feb 15 22:15:00 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:15:12 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=48279 PROTO=2 Feb 15 22:15:21 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=23905 PROTO=2 Feb 15 22:16:32 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=25345 PROTO=2 Feb 15 22:16:36 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=26260 PROTO=2 Feb 15 22:17:04 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:17:05 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:78:55:36:05:20:1a:08:00 SRC=192.168.1.37 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=62458 PROTO=2 Feb 15 22:17:05 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:18:39 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=42352 PROTO=2 Feb 15 22:18:58 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=40676 PROTO=2 Feb 15 22:19:11 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=23082 PROTO=2 Feb 15 22:19:12 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:19:13 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:cc:96:e5:0f:fe:ab:08:00 SRC=192.168.1.89 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=23316 PROTO=2 Feb 15 22:19:15 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:19:29 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=46262 PROTO=2 Feb 15 22:19:33 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=31576 PROTO=2 Feb 15 22:20:13 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=11964 PROTO=2 Feb 15 22:20:56 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=29254 PROTO=2 Feb 15 22:21:20 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:21:20 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:cc:96:e5:0f:fe:ab:08:00 SRC=192.168.1.89 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=23319 PROTO=2 Feb 15 22:21:26 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=8782 PROTO=2 Feb 15 22:21:29 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:21:50 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=64510 PROTO=2 Feb 15 22:22:26 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=9504 PROTO=2 Feb 15 22:22:45 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=43512 PROTO=2 Feb 15 22:22:56 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=20111 PROTO=2 Feb 15 22:23:28 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:23:29 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:f4:4e:e3:44:41:02:08:00 SRC=192.168.1.114 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=27283 PROTO=2 Feb 15 22:24:09 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:76:b5:03:e5:1d:c3:08:00 SRC=192.168.1.200 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=56928 PROTO=2 Feb 15 22:24:23 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=24943 PROTO=2 Feb 15 22:24:46 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=54474 PROTO=2 Feb 15 22:25:08 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=45161 PROTO=2 Feb 15 22:25:23 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=60106 PROTO=2 Feb 15 22:25:27 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=5619 PROTO=2 Feb 15 22:25:38 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:26:49 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:10:6f:d9:de:22:39:08:00 SRC=192.168.1.29 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=44661 PROTO=2 Feb 15 22:26:49 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:a0:29:42:ff:a0:c8:08:00 SRC=192.168.1.72 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=19442 PROTO=2 Feb 15 22:27:44 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:27:45 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:d0:12:55:30:7b:31:08:00 SRC=192.168.1.33 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:27:48 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:28:20 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=8319 PROTO=2 Feb 15 22:29:52 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:29:53 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:78:55:36:05:20:1a:08:00 SRC=192.168.1.37 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=62461 PROTO=2 Feb 15 22:29:57 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:29:59 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:0b:83:af:d1:a4:08:00 SRC=192.168.1.15 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=25749 PROTO=2 Feb 15 22:30:14 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=20172 PROTO=2 Feb 15 22:30:39 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=29964 PROTO=2 Feb 15 22:31:03 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=60766 PROTO=2 Feb 15 22:31:07 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:0b:83:af:d1:a4:08:00 SRC=192.168.1.15 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=39423 PROTO=2 Feb 15 22:31:17 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=5654 PROTO=2 Feb 15 22:32:01 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:32:01 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:56:1e:a1:03:f5:de:08:00 SRC=192.168.1.188 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=37895 PROTO=2 Feb 15 22:32:05 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:7a:fd:5b:63:4b:f7:08:00 SRC=192.168.1.171 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=53844 PROTO=2 Feb 15 22:32:07 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:34:05 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:0b:83:af:d1:a4:08:00 SRC=192.168.1.15 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=64669 PROTO=2 Feb 15 22:34:08 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:01:1c:6a:1b:95:1c:27:08:00 SRC=0.0.0.0 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:34:09 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:e4:38:83:91:b3:ab:08:00 SRC=192.168.1.1 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=0 DF PROTO=2 Feb 15 22:34:09 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:f4:6a:dd:8a:51:7b:08:00 SRC=192.168.1.26 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=59900 PROTO=2 Feb 15 22:34:14 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=65411 PROTO=2 Feb 15 22:34:17 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:1a:a8:4e:a5:56:0f:08:00 SRC=192.168.1.112 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=33447 PROTO=2 Feb 15 22:34:32 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=01:00:5e:00:00:fb:c2:ed:dc:e3:61:20:08:00 SRC=192.168.1.138 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=61887 PROTO=2 adam@laptop:~$ sudo journalctl -k --since "24 hours ago" -g "UFW (BLOCK|DENY)" --no-pager | awk '{ src=""; dpt=""; for(i=1;i<=NF;i++){ if($i ~ /^SRC=/){src=substr($i,5)} if($i ~ /^DPT=/){dpt=substr($i,5)} } if(src!="") SRC[src]++ if(dpt!="") DPT[dpt]++ } END{ print "Top source IPs:"; for(s in SRC) print SRC[s], s | "sort -nr | head -n 20"; print "\nTop destination ports:"; for(p in DPT) print DPT[p], p | "sort -nr | head -n 20"; }' Top source IPs: Top destination ports: 19 0.0.0.0 18 192.168.1.112 15 192.168.1.171 14 192.168.1.1 12 192.168.1.138 7 192.168.1.200 6 32996 5 192.168.1.15 4 192.168.1.103 3 192.168.1.26 3 192.168.1.111 2 fe80:0000:0000:0000:5203:cfff:fe77:21a9 2 38069 2 3702 2 192.168.1.89 2 192.168.1.72 2 192.168.1.37 2 192.168.1.36 2 192.168.1.34 2 192.168.1.29 adam@laptop:~$ sudo journalctl -k --since "24 hours ago" -g "UFW (BLOCK|DENY)" --no-pager | grep -vE 'SRC=192\.168\.|SRC=10\.|SRC=172\.(1[6-9]|2[0-9]|3[0-1])\.|DST=224\.' Feb 15 22:00:02 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC= SRC=fe80:0000:0000:0000:5cd2:aadb:2a3d:fd79 DST=ff02:0000:0000:0000:0000:0000:0000:000c LEN=655 TC=0 HOPLIMIT=1 FLOWLBL=285815 PROTO=UDP SPT=38069 DPT=3702 LEN=615 Feb 15 22:00:03 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=24:ee:9a:81:75:13:50:03:cf:77:21:a9:86:dd SRC=fe80:0000:0000:0000:5203:cfff:fe77:21a9 DST=fe80:0000:0000:0000:5cd2:aadb:2a3d:fd79 LEN=1399 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=UDP SPT=3702 DPT=38069 LEN=1359 Feb 15 22:00:03 laptop kernel: [UFW BLOCK] IN=wlp2s0 OUT= MAC=24:ee:9a:81:75:13:50:03:cf:77:21:a9:86:dd SRC=fe80:0000:0000:0000:5203:cfff:fe77:21a9 DST=fe80:0000:0000:0000:5cd2:aadb:2a3d:fd79 LEN=1399 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=UDP SPT=3702 DPT=38069 LEN=1359 adam@laptop:~$

ChatGPT said:

Yep — this output is exactly the “LAN discovery chatter” I was talking about. Nothing here looks like an internet attack.

What these lines actually are

You’ve got three main buckets:

WSD / WS-Discovery (Windows/printer discovery)

DST=239.255.255.250 and DPT=3702 (IPv4 multicast)
DST=ff02::c and DPT=3702 (IPv6 multicast)
That’s normal “who’s on the network / who has services?” traffic.

mDNS / Bonjour

DST=224.0.0.251 (multicast)
Also normal LAN discovery.

IGMP

DST=224.0.0.1 with PROTO=2 and TTL=1
That’s multicast group membership housekeeping.

Also notice: everything is private LAN (192.168.1.x) or IPv6 link-local (fe80::) and TTL/HOPLIMIT is 1, meaning it’s not going anywhere beyond the local network.

Why your awk “Top source IPs” came out blank / scrambled

Because you’re piping to sort|head inside the loop without closing the pipe, the sort output flushes later and ends up printing under the wrong header.

Use this fixed version (closes the pipe properly):

sudo journalctl -k --since "24 hours ago" -g "UFW (BLOCK|DENY)" --no-pager |
awk '
{
  src=""; dpt="";
  for(i=1;i<=NF;i++){
    if($i ~ /^SRC=/){src=substr($i,5)}
    if($i ~ /^DPT=/){dpt=substr($i,5)}
  }
  if(src!="") SRC[src]++
  if(dpt!="") DPT[dpt]++
}
END{
  cmd="sort -nr | head -n 20"

  print "Top source IPs:";
  for(s in SRC) print SRC[s], s | cmd
  close(cmd)

  print ""
  print "Top destination ports:";
  for(p in DPT) print DPT[p], p | cmd
  close(cmd)
}'

(You’ll see 3702 show up clearly, plus some ephemeral ports like 32996 which are just reply ports.)

If you want to see only “real” suspicious stuff (public internet hits)

Right now, your log shows none. This filter will drop LAN + link-local IPv6:

sudo journalctl -k --since "24 hours ago" -g "UFW (BLOCK|DENY)" --no-pager |
awk '{
  src=""
  for(i=1;i<=NF;i++) if($i ~ /^SRC=/) {src=substr($i,5)}
  if(src=="") next
  if(src ~ /^10\.|^192\.168\.|^172\.(1[6-9]|2[0-9]|3[0-1])\.|^127\./) next
  if(src ~ /^fe80:|^fd|^fc|^::1$/) next
  print
}'

If that prints nothing (it likely will), you’re clean from an “internet scanning” perspective.

If you just want to reduce this log spam

This keeps UFW on, but hides the noisy multicast classes when you’re “auditing”:

sudo journalctl -k --since "24 hours ago" -g "UFW (BLOCK|DENY)" --no-pager |
grep -vE 'DST=224\.|DST=239\.255\.255\.250|DST=ff02:|PROTO=2'

If you want, paste the fixed awk output (top IPs + top ports). I can tell you which device is likely which (.1 is usually router, etc.) and whether any of it is worth caring about.

You said:

Thank you for the information. I think some users will find this useful on our blog post. Let's conclude this conversation and work on other things.

ChatGPT said:

Sounds good, Captain. ✅

Quick takeaway for the post: what you’re seeing is normal LAN discovery/multicast traffic (mDNS/WSD/IGMP) getting logged by UFW — not an internet attack.

Whenever you’re ready, tell me what you want to work on next.

ChatGPT said:

Why it happens on Starlink (the real reason)

Is it MTU?

The fix that helps most: SSH keepalives (client + server)

On your Starlink client (recommended)

On the server (optional but good)

Best “Starlink-proof” solution: MOSH or a VPN overlay

About your firewall logs: “lots of blocking”

The sane hardening move (especially with Starlink’s changing IPs)

You said:

You said:

ChatGPT said:

What your tests say

✅ IPv4 MTU is fine

❌ IPv6: your client currently has no IPv6 connectivity

So why the SSH “broken pipe” still happens?

Do this (it fixes 90% of Starlink SSH pain)

1) Add SSH keepalives on your laptop

2) (Optional) Add server-side keepalives

3) Use MOSH if you want it to feel “unbreakable”

About tracepath: command not found

Firewall logs “lots of blocking”

You said:

ChatGPT said:

You said:

ChatGPT said:

Audit UFW blocks in the journal (clean + useful)

Show last 1 hour (quick sanity check)

Show last 24 hours (your original ask, but pageless)

Live view

“Real audit” summary: top sources + top destination ports

If you only care about non-local / internet-looking sources

You said:

ChatGPT said:

What these lines actually are

Why your awk “Top source IPs” came out blank / scrambled

If you want to see only “real” suspicious stuff (public internet hits)

If you just want to reduce this log spam

You said:

ChatGPT said:

About `tracepath: command not found`