Re: attack of the marsians
> Jun 12 11:27:53 abyss kernel: martian source 10.10.150.2 from 10.10.151.43,
> on dev eth0
> Jun 12 11:27:53 abyss kernel: ll header: ff:ff:ff:ff:ff:ff:00:00:1c:de:35:0e:08:06
> the MAC is from 151.43, this is correct.
> i get this messages now every minute
Check with ethereal it shows you some more info. And btw, without reading
the docs, shouldn't the ll header be source:dst? In this case the packet
came from the ethernet broadcast address with an ip source address that
is most probably not with this MAC in the arp table.
-christian-
--
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: