Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 15 Nov 2001 22:48:21 +0100 (CET)
From:      <airot@lazir.toya.net.pl>
To:        Sven Wittig <Sven.wittig@gmx.de>
Cc:        <security@FreeBSD.ORG>
Subject:   Re: unusual  log in var/log/messages 
Message-ID:  <Pine.LNX.4.33.0111152242230.4419-100000@lazir.toya.net.pl>
In-Reply-To: <3BF4369A.3030503@gmx.de>

next in thread | previous in thread | raw e-mail | index | archive | help


On Thu, 15 Nov 2001, Sven Wittig wrote:

> Hi,
>
> I recently discovered this entry in my messages-logfile
>
> " Nov 14 15:10:44 leo2 /kernel: arp: 137.226.141.33 moved from
> 00:40:33:39:80:d1 to 00:50:bf:7e:6e:70 on de0"
>
> is this a kind of attack or what?
>

Nope it only mean that someone changed arp.
It could be spoof, or simply someone changed network card.

Regards.

airot...


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.4.33.0111152242230.4419-100000>