noob: who-has tell messages

From: jim beam (uce_at_ftc.gov)
Date: 06/22/04


Date: Tue, 22 Jun 2004 04:52:00 GMT

hi, i'm getting /tons/ of "martian source" packets on my linux box like
this:

martian source 10.153.56.57 from 10.153.32.1, on dev eth1
ll header: ff:ff:ff:ff:ff:ff:00:0a:8b:6d:b4:54:08:06
martian source 10.153.52.29 from 10.153.32.1, on dev eth1
ll header: ff:ff:ff:ff:ff:ff:00:0a:8b:6d:b4:54:08:06

when i do tcpdump, these show as:
21:33:35.121984 arp who-has 10.153.38.59 tell 10.153.32.1
21:33:35.136925 arp who-has 10.153.37.177 tell 10.153.32.1

this is just a personal network and doesn't have addresses in this range
on it.

what's going on?



Relevant Pages

  • noob: who-has tell messages
    ... i'm getting /tons/ of "martian source" packets on my linux box like ... on dev eth1 ... when i do tcpdump, these show as: ... 21:33:35.136925 arp who-has 10.153.37.177 tell 10.153.32.1 ...
    (comp.os.linux.networking)
  • [SLE] Tracking down Martian Source
    ... My gateway has started logging martian source packets. ... 192.168.250.251, on dev eth1 ... Jan 3 01:19:13 mordor kernel: ll header: ... Jan 3 01:21:26 mordor kernel: martian source 192.168.250.1 from ...
    (SuSE)