It seems this was caused by a failed or failing ethernet card on one of the machines. Not a security issue after all...
----- original message ----- From: Mark Bartel <[EMAIL PROTECTED]> Sent: Wed, 1 Aug 2001 13:21:21 -0400 To: [email protected] Subject: zero-length Oversized Ethernet frame "Oversized Ethernet frame..." .... length 0 ? The machine is a web server, which is accessible from the web via port redirects on the firewall. I'm assuming that the packets originated from the web since it's a home network, but it would seem a little odd that packets redirected by one Debian machine (the firewall) would cause error messages in another. There's a W2K Pro box and a Windows ME box on the network, but there are no redirects to them, and it is a private network (NAT on the firewall). -Mark Bartel PS I periodically get these ntpd messages... does it mean that synchronization is forever lost and I need to do something to fix it, or does it only indicate temporary loss of synchronization? ----- original message ----- Sent: Wed, 01 Aug 2001 12:02:05 -0400 Subject: cob 08/01/01:12.02 system check Unusual System Events =-=-=-=-=-=-=-=-=-=-= Aug 1 11:14:59 cob kernel: eth0: Oversized Ethernet frame spanned multiple buffers, entry 0xa05a67 length 0 status 0600! Aug 1 11:14:59 cob kernel: eth0: Oversized Ethernet frame c3fcf470 vs c3fcf470. Aug 1 11:14:59 cob kernel: eth0: Oversized Ethernet frame spanned multiple buffers, entry 0xa05a68 length 0 status 0400! Aug 1 11:14:59 cob kernel: eth0: Oversized Ethernet frame c3fcf480 vs c3fcf480. Aug 1 11:02:33 cob ntpd[19115]: synchronisation lost Aug 1 11:14:59 cob kernel: eth0: Oversized Ethernet frame spanned multiple buffers, entry 0xa05a67 length 0 status 0600! Aug 1 11:14:59 cob kernel: eth0: Oversized Ethernet frame c3fcf470 vs c3fcf470. Aug 1 11:14:59 cob kernel: eth0: Oversized Ethernet frame spanned multiple buffers, entry 0xa05a68 length 0 status 0400! Aug 1 11:14:59 cob kernel: eth0: Oversized Ethernet frame c3fcf480 vs c3fcf480. Aug 1 11:02:33 cob ntpd[19115]: synchronisation lost -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
