From owner-freebsd-security Thu Nov 15 13:49:12 2001 Delivered-To: freebsd-security@freebsd.org Received: from mail2.uniserve.com (mail2.uniserve.com [204.244.156.10]) by hub.freebsd.org (Postfix) with ESMTP id 2F4E637B418 for ; Thu, 15 Nov 2001 13:49:10 -0800 (PST) Received: from landons.vpp-office.uniserve.ca ([216.113.198.10] helo=pirahna.uniserve.com) by mail2.uniserve.com with esmtp (Exim 3.13 #1) id 164UNf-0000K3-00; Thu, 15 Nov 2001 13:49:07 -0800 Message-Id: <5.1.0.14.0.20011115134701.02d027b0@pop.uniserve.com> X-Sender: landons@pop.uniserve.com X-Mailer: QUALCOMM Windows Eudora Version 5.1 Date: Thu, 15 Nov 2001 13:49:06 -0800 To: Sven Wittig , security@FreeBSD.ORG From: Landon Stewart Subject: Re: unusual log in var/log/messages In-Reply-To: <3BF4369A.3030503@gmx.de> References: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Probably not. Either someone changed their hardware or you are using an ADSL connection. I've noticed that with my ADSL connection, because my ADSL modem acts as a bridge, sometimes the arp of my gateway is the MAC of the modem and sometimes its the MAC of the actual gateway router. I'm curious though too, so if anyone else knows, post it. At 10:41 PM 11/15/2001 +0100, Sven Wittig wrote: >Hi, > >I recently discovered this entry in my messages-logfile > >" Nov 14 15:10:44 leo2 /kernel: arp: 137.226.141.33 moved from >00:40:33:39:80:d1 to 00:50:bf:7e:6e:70 on de0" > >is this a kind of attack or what? > >Cu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message