Date: Fri, 16 Nov 2001 02:03:01 +0200 (EET) From: Len Merikanto <lennu@tietoverkot.net> To: Sven Wittig <Sven.wittig@gmx.de> Cc: <security@FreeBSD.ORG> Subject: Re: unusual log in var/log/messages Message-ID: <20011116020109.S18296-100000@mail.tietoverkot.net> In-Reply-To: <3BF4369A.3030503@gmx.de>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 15 Nov 2001, Sven Wittig wrote:
> Date: Thu, 15 Nov 2001 22:41:46 +0100
> From: Sven Wittig <Sven.wittig@gmx.de>
> To: security@FreeBSD.ORG
> Subject: unusual log in var/log/messages
>
> Hi,
>
> I recently discovered this entry in my messages-logfile
>
> " Nov 14 15:10:44 leo2 /kernel: arp: 137.226.141.33 moved from
> 00:40:33:39:80:d1 to 00:50:bf:7e:6e:70 on de0"
>
> is this a kind of attack or what?
>
> Cu
>
> Sven Wittig
>
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>
I have same logs now and then and i guess it comes from
multiple interfaces with diffrent ips on same switch
i guess i am not sure but this cheapo switch i bought sumhow forgets
things and it comes from there.
never happened b4 when it was sitting in catalyst.
must be something to do with switches. :)
.....................................................................
Len Merikanto
MMI Tietoverkot Oy
Munkkisaarenkatu 2, 4. krs.
FIN - 00150 Helsinki
lennu@tietoverkot.net
GSM: +358 (0)40 900 8494
TEL: +358 (0)9 6869 1950
FAX: +358 (0)9 6869 1935
.....................................................................
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011116020109.S18296-100000>