Date: Thu, 15 Nov 2001 17:25:24 -0500 From: "alexus" <ml@db.nexgen.com> To: "Sven Wittig" <Sven.wittig@gmx.de>, <security@FreeBSD.ORG>, "Landon Stewart" <landons@uniserve.com> Subject: Re: unusual log in var/log/messages Message-ID: <002d01c16e24$6bd195a0$0d00a8c0@alexus> References: <bulk.9491.20011114170248@hub.freebsd.org> <5.1.0.14.0.20011115134701.02d027b0@pop.uniserve.com>
next in thread | previous in thread | raw e-mail | index | archive | help
this is one is the closest to the truth most likely this fbsd box acts as router and since it has two nic it mixes mac and ips solution: create VLAN on your switch (if its possible) and put local and external ethernet on diff vlans you wont see this error in your life again.. ----- Original Message ----- From: "Landon Stewart" <landons@uniserve.com> To: "Sven Wittig" <Sven.wittig@gmx.de>; <security@FreeBSD.ORG> Sent: Thursday, November 15, 2001 4:49 PM Subject: Re: unusual log in var/log/messages > Probably not. Either someone changed their hardware or you are using an > ADSL connection. I've noticed that with my ADSL connection, because my > ADSL modem acts as a bridge, sometimes the arp of my gateway is the MAC of > the modem and sometimes its the MAC of the actual gateway router. > > I'm curious though too, so if anyone else knows, post it. > > > At 10:41 PM 11/15/2001 +0100, Sven Wittig wrote: > >Hi, > > > >I recently discovered this entry in my messages-logfile > > > >" Nov 14 15:10:44 leo2 /kernel: arp: 137.226.141.33 moved from > >00:40:33:39:80:d1 to 00:50:bf:7e:6e:70 on de0" > > > >is this a kind of attack or what? > > > >Cu > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?002d01c16e24$6bd195a0$0d00a8c0>