On Tue, 2003-07-08 at 15:12, daniel wrote: > > first off, _calm_down_. i'm in agreement with zack -- wigging out mac > addresses are typically a hardware issue (especially on a closed network), so > for the price and availability of them, swap that out first before you start > freaking out about a hack. > I had some other infos. It appears that there are layer 2 ethernet frames travelling on the network with my IP address and the wrong MAC address. Maybe they're not even generated by my box. I just understood that the ff:ff:ff:ff:ff:ff is related to broadcast packets. Is there a particular meaning in source address 00:00:00:00:00:00? I also launched as root
nohup tcpdump ether src 00:00:00:00:00:00 and src 192.168.202.156& This should list in /root/nohup any packet starting from my box with the wrong address. Am I right? Thanks -- [EMAIL PROTECTED] mailing list
