[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: attack of the marsians



On Tue, 2002-06-11 at 19:48, Thomas Thurman wrote:
> On Tue, 11 Jun 2002, Proud Debian-User wrote:

> > Jun 11 19:03:19 abyss kernel: martian source 10.10.150.1 from 10.10.151.43,
> > on dev eth0

> means "broadcast"; obviously that can't be a source address. I'm not sure
> how 10.10.150.1 can be considered invalid, though.

Just guessing: does the kernel warn when the IP sender does not agree
with the MAC of that host? (Of course, only if we're in the local net -
this is usual for routed packets, obviously)

cheers
-- vbi


-- 
secure email with gpg            avbidder@fortytwo.ch: key id 0x92082481
                                 avbidder@acter.ch:    key id 0x5E4B731F

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: