From owner-freebsd-security Thu Nov 15 14: 4: 2 2001 Delivered-To: freebsd-security@freebsd.org Received: from mail5.doit.wisc.edu (mail5.doit.wisc.edu [144.92.9.76]) by hub.freebsd.org (Postfix) with ESMTP id 107BC37B417 for ; Thu, 15 Nov 2001 14:03:53 -0800 (PST) Received: from [144.92.198.10] by mail5.doit.wisc.edu id QAA60120 (8.9.1/50); Thu, 15 Nov 2001 16:03:48 -0600 Received: from PEN/SpoolDir by plantpath.wisc.edu (Mercury 1.48); 15 Nov 01 16:04:18 -0600 Received: from SpoolDir by PEN (Mercury 1.48); 15 Nov 01 16:04:03 -0600 From: "Jason Haas" Organization: University of Wisconsin To: Sven Wittig , security@FreeBSD.ORG Date: Thu, 15 Nov 2001 16:03:54 CST MIME-Version: 1.0 Subject: Re: unusual log in var/log/messages Reply-To: jjh@plantpath.wisc.edu Message-ID: <3BF3E769.18803.340F95@localhost> In-reply-to: <3BF4369A.3030503@gmx.de> X-mailer: Pegasus Mail for Windows (v4.01) Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Content-description: Mail message body Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Are you running a DHCP server? This could be happening if the server gives out a new IP for a computer. Jason Haas Date sent: Thu, 15 Nov 2001 22:41:46 +0100 From: Sven Wittig Organization: Tigga.org To: security@FreeBSD.ORG Subject: unusual log in var/log/messages > Hi, > > I recently discovered this entry in my messages-logfile > > " Nov 14 15:10:44 leo2 /kernel: arp: 137.226.141.33 moved from > 00:40:33:39:80:d1 to 00:50:bf:7e:6e:70 on de0" > > is this a kind of attack or what? > > Cu > > Sven Wittig > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message