On Mon, 28 Jan 2002 18:44:51 +0100 Reginald R. Richardson wrote:

> Can someone on the list, explain me what in heavens name does this mean,
> and what can i do to avoid it from happening
> 
> thnks
> 
> Jan 28 06:46:13 sxm-gw kernel: f48388d8 for 030aa8c0, dev eth2 
> Jan 28 06:46:13 sxm-gw kernel: ll header: 00 10 b5 e0 79 50 00 c0 f0 12 f1 c8 08 00 

[ repeated entries snipped ]

It means that packets from 216.136.131.244 are reaching eth2 of your
router.  The packets in question are headed for 192.168.10.3 .  I'm
guessing they are martians because 216.136.131.244 should not be
connected to eth2.

00 c0 f0 12 f1 c8 is the MAC address of offending host.  It looks like
it has a NIC manufactured by Kingston [1].  There's a bit more
information on martian packets at
  http://c0wz.steinkuehler.net/dox/martian.txt

and
  http://lists.suse.com/archive/suse-linux-e/2000-Jul/0282.html

Oh, and the "secret" to decoding the hexidecimal addresses in the first
line of the martians:

   Hexidecimal:    f4   83   88   d8
   Decimal:       244  131  136  216
   IP Address:    216.133.136.244   (decimal values flipped left-to-right)

Hope that helps.

--Brad

[1] http://standards.ieee.org/regauth/oui/oui.txt  (~800 kB)


_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user

Reply via email to