Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 15 Nov 2001 22:14:21 -0500
From:      Scott Lambert <lambert@lambertfam.org>
To:        security@FreeBSD.ORG
Subject:   Re: unusual  log in var/log/messages
Message-ID:  <20011115221421.A42599@laptop.lambertfam.org>
In-Reply-To: <20011116020109.S18296-100000@mail.tietoverkot.net>; from lennu@tietoverkot.net on Fri, Nov 16, 2001 at 02:03:01AM %2B0200
References:  <3BF4369A.3030503@gmx.de> <20011116020109.S18296-100000@mail.tietoverkot.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 15 Nov 2001, Sven Wittig wrote:

> I recently discovered this entry in my messages-logfile
>
> " Nov 14 15:10:44 leo2 /kernel: arp: 137.226.141.33 moved from
> 00:40:33:39:80:d1 to 00:50:bf:7e:6e:70 on de0"
>
> is this a kind of attack or what?

This *can* happen with a DHCP environment.

-- 
Scott Lambert          KC5MLE            Unix SysAdmin -- Looking for work.
lambert@lambertfam.org       http://www.lambertfam.org/~lambert/resume.html
2.5 years Sr. SysAdmin experience with FreeBSD in small & medium size ISPs.
The last 5 months have included exposure to Solaris 7, True64 5, and Linux.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011115221421.A42599>