[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [suse-security] Martian Source



On Wed, 2002-10-23 at 15:38, Grosswiler Roger wrote:
> Oct 23 15:34:38 trinity kernel: martian source 255.255.255.255 from
> 10.225.80.1,
>  on dev eth1
> Oct 23 15:34:38 trinity kernel: ll header:
> ff:ff:ff:ff:ff:ff:00:09:7b:8d:08:54:0
> 8:00
> 
Could be something like a smurf attack. A workstation pretending to be
all the addresses on the network ....

> --> as i heard, this problem is known and it is not an intrusion by
> another system - there is a malconfigured adress somewhere in the system
> oder in the kernel. But this message is filling my logs and my disks. So:
> 
> - is it like i heard? (hopefully yes)
> - how can i solve this problem, so i will not get anymore message in my
> logs for that?
> 
> Thx in advance!
> 
> Roger
> 
> 
> 
> -- 
> Check the headers for your unsubscription address
> For additional commands, e-mail: suse-security-help@xxxxxxxx
> Security-related bug reports go to security@xxxxxxx, not here
> 

Attachment: signature.asc
Description: This is a digitally signed message part