Re: mystery martian source from 127.0.0.1
- From: Tauno Voipio <tauno.voipio@xxxxxxxxxxxxx>
- Date: Wed, 07 Dec 2005 20:44:55 GMT
EricT wrote:
Hello everyone,
this matter has been discussed not only once, i found a lot of hits at google. After reading almost all of them, i still do not know what the cause is and actually i am very confused.
Some say the traffic is misrouted by the ISP, others think it is a problem of the firewall NAT rules.
A syslog example: Dec 06 21:50:58 localhost kernel: martian source 80.219.238.182 from 127.0.0.1, on dev eth0 Dec 06 21:50:58 localhost kernel: ll header: xx:xx:xx:xx:xx:xx:00:09:7b:8d:98:70:08:00
xx:xx:xx:xx:xx:xx is the HWAddr of eth0, the rest of the header (00:09:7b:8d:98:70:08:00) is absolutly unknown to me.
The reported address contains both the Ethernet source address (00:09:7b:8d:98:70) and the IP protocol identifier (08:00).
Try to find the hardware with the Ethernet address above.
--
Tauno Voipio tauno voipio (at) iki fi .
- Follow-Ups:
- Re: mystery martian source from 127.0.0.1
- From: EricT
- Re: mystery martian source from 127.0.0.1
- References:
- mystery martian source from 127.0.0.1
- From: EricT
- mystery martian source from 127.0.0.1
- Prev by Date: mystery martian source from 127.0.0.1
- Next by Date: Re: mystery martian source from 127.0.0.1
- Previous by thread: mystery martian source from 127.0.0.1
- Next by thread: Re: mystery martian source from 127.0.0.1
- Index(es):
Relevant Pages
|