noob: who-has tell messages
From: jim beam (uce_at_ftc.gov)
Date: 06/22/04
- Next message: jayjwa: "Re: Linux has a long way to go before it becomes the major OS"
- Previous message: Randy Ramsdell: "Re: Does Portsentry make sense if there is a packet filter?"
- Next in thread: Allen Kistler: "Re: noob: who-has tell messages"
- Reply: Allen Kistler: "Re: noob: who-has tell messages"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 22 Jun 2004 04:52:00 GMT
hi, i'm getting /tons/ of "martian source" packets on my linux box like
this:
martian source 10.153.56.57 from 10.153.32.1, on dev eth1
ll header: ff:ff:ff:ff:ff:ff:00:0a:8b:6d:b4:54:08:06
martian source 10.153.52.29 from 10.153.32.1, on dev eth1
ll header: ff:ff:ff:ff:ff:ff:00:0a:8b:6d:b4:54:08:06
when i do tcpdump, these show as:
21:33:35.121984 arp who-has 10.153.38.59 tell 10.153.32.1
21:33:35.136925 arp who-has 10.153.37.177 tell 10.153.32.1
this is just a personal network and doesn't have addresses in this range
on it.
what's going on?
- Next message: jayjwa: "Re: Linux has a long way to go before it becomes the major OS"
- Previous message: Randy Ramsdell: "Re: Does Portsentry make sense if there is a packet filter?"
- Next in thread: Allen Kistler: "Re: noob: who-has tell messages"
- Reply: Allen Kistler: "Re: noob: who-has tell messages"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
