Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 15 Nov 2001 22:21:44 -0500 (EST)
From:      Mitch Collinsworth <mitch@collinsworth.info>
To:        Greg <greg@rapidfx.com>
Cc:        security@FreeBSD.ORG
Subject:   Re: Re[2]: unusual  log in var/log/messages
Message-ID:  <Pine.LNX.4.10.10111152219470.1744-100000@ruby.ccmr.cornell.edu>
In-Reply-To: <12126694534.20011115181537@rapidfx.com>

next in thread | previous in thread | raw e-mail | index | archive | help

On Thu, 15 Nov 2001, Greg Wirth wrote:

> I also see these from time to time, and have never pinned down
> exactly what it means. I've never found any damage or abuse
> during or after these messages. I would really like to know.
> The times always match, and happen at random times.
> Versions don't seem to matter, as it has happened since 3.3
> 
> Nov 12 06:18:41 aix /kernel: arp: 24.237.82.161 moved from
>  00:40:c7:81:22:04 to 00:04:ac:1a:4e:e7 on dc0
> Nov 12 06:18:41 aix /kernel: arp: 24.237.82.161 moved from
>  00:04:ac:1a:4e:e7 to 00:40:c7:81:22:04 on dc0

Have you checked to find out which system(s) are involved?  It has
to be someone on the same subnet with you.

-Mitch


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.4.10.10111152219470.1744-100000>