Date: Thu, 15 Nov 2001 13:53:34 -0800 From: Landon Stewart <landons@uniserve.com> To: security@FreeBSD.ORG Subject: Re: unusual log in var/log/messages Message-ID: <5.1.0.14.0.20011115135330.02d6fcf8@pop.uniserve.com>
next in thread | raw e-mail | index | archive | help
Actually, isn't this typical behaviour of a host with a NIC in promiscuous mode? Someone could be running a sniffer on 00:40:33:39:80:d1 and it responded to a ping that was sent to 137.226.141.33. Is this probable? At 10:41 PM 11/15/2001 +0100, Sven Wittig wrote: >Hi, > >I recently discovered this entry in my messages-logfile > >" Nov 14 15:10:44 leo2 /kernel: arp: 137.226.141.33 moved from >00:40:33:39:80:d1 to 00:50:bf:7e:6e:70 on de0" > >is this a kind of attack or what? > >Cu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5.1.0.14.0.20011115135330.02d6fcf8>