bogon.ssh ？？？

cybersingle

前段时间服务器还好好的，也没更改过什么配置，这几天流量一下特别大，用tcpdump看了一下：
10:17:52.272166 IP bogon.3769 > bogon.ssh: . ack 698816 win 16264
10:17:52.272268 IP bogon.ssh > bogon.3769: P 698816:698868(52) ack 8633 win 7504
10:17:52.272346 IP bogon.ssh > bogon.3769: P 698868:698952(84) ack 8633 win 7504
10:17:52.272406 IP bogon.ssh > bogon.37610:17:52.306611 IP bogon.ssh > bogon.3769: P 702756:702808(52) ack 8685 win 7504
10:17:52.306630 IP bogon.3769 > bogon.ssh: . ack 702704 win 15496
10:17:52.306688 IP bogon.ssh > bogon.3769: P 702808:702876(6 ack 8685 win 7504
10:17:52.306756 IP bogon.3769 > bogon.ssh: . ack 702808 win 15392
10:17:52.306761 IP bogon.ssh > bogon.3769: P 702876:702944(6 ack 8685 win 7504
10:17:52.306828 IP bogon.ssh > bogon.3769: P 702944:702996(52) ack 8685 win 7504
10:17:52.306898 IP bogon.ssh > bogon.3769: P 702996:703064(6 ack 8685 win 7504
10:17:52.306910 IP bogon.3769 > bogon.ssh: . ack 702944 win 15256
10:17:52.306968 IP bogon.ssh > bogon.3769: P 703064:703116(52) ack 8685 win 7504
10:17:52.307040 IP bogon.ssh > bogon.3769: P 703116:703184(6 ack 8685 win 7504
10:17:52.307051 IP bogon.3769 > bogon.ssh: . ack 703064 win 15136
10:17:52.307109 IP bogon.ssh > bogon.3769: P 703184:703236(52) ack 8685 win 7504
10:17:52.307177 IP bogon.ssh > bogon.3769: P 703236:703304(6 ack 8685 win 7504
10:17:52.307194 IP bogon.3769 > bogon.ssh: . ack 703184 win 15016
10:17:52.307247 IP bogon.ssh > bogon.3769: P 703304:703356(52) ack 8685 win 7504
10:17:52.307316 IP bogon.ssh > bogon.3769: P 703356:703424(6 ack 8685 win 7504
10:17:52.307327 IP bogon.3769 > bogon.ssh: . ack 703304 win 16384
10:17:52.307382 IP bogon.ssh > bogon.3769: P 703424:703476(52) ack 8685 win 7504
10:17:52.307458 IP bogon.ssh > bogon.3769: P 703476:703528(52) ack 8685 win 7504
10:17:52.307466 IP bogon.3769 > bogon.ssh: . ack 703424 win 16264
10:17:52.307534 IP bogon.ssh > bogon.3769: P 703528:703596(6 ack 8685 win 7504
10:17:52.307599 IP bogon.ssh > bogon.3769: P 703596:703664(6 ack 8685 win 7504
10:17:52.307605 IP bogon.3769 > bogon.ssh: . ack 703528 win 16160
10:17:52.307668 IP bogon.ssh > bogon.3769: P 703664:703716(52) ack 8685 win 7504
10:17:52.307715 IP bogon.3769 > bogon.ssh: P 8685:8737(52) ack 703596 win 16092
10:17:52.307742 IP bogon.ssh > bogon.3769: P 703716:703784(6 ack 8737 win 7504
10:17:52.307803 IP bogon.ssh > bogon.3769: P 703784:703836(52) ack 8737 win 7504
10:17:52.307811 IP bogon.3769 > bogon.ssh: . ack 703716 win 15972
双网卡的，一个内网一个外网，最后只好暂时把外网的网卡/sbin/iptables -A INPUT -i eth1 -j DROP
才不出了 但是这样外网卡就没法用了，请高人指点一下出了什么问题了

9dshh

主机名变成bogon了吧

cybersingle

没有啊 主机名还是原来的，真是奇怪

platinum

tcpdump 后面加 -nn 参数，再看看

9dshh

使用网络监控软件看看，主机名变成bogon了