From owner-freebsd-security Mon Mar 25 10: 7:38 2002 Delivered-To: freebsd-security@freebsd.org Received: from hokkshideh2.jetcafe.org (hokkshideh2.jetcafe.org [205.147.43.8]) by hub.freebsd.org (Postfix) with ESMTP id 6240237B405; Mon, 25 Mar 2002 10:07:22 -0800 (PST) Received: from hokkshideh2.jetcafe.org (localhost [127.0.0.1]) by hokkshideh2.jetcafe.org (8.11.6/8.11.6) with ESMTP id g2PI6AR05307; Mon, 25 Mar 2002 10:06:10 -0800 (PST) (envelope-from dave@hokkshideh2.jetcafe.org) Message-Id: <200203251806.g2PI6AR05307@hokkshideh2.jetcafe.org> X-Mailer: exmh version 2.5 07/13/2001 with nmh-1.0.4 To: krzysztof Strzelczyk Cc: freebsd-questions@FreeBSD.ORG, freebsd-security@FreeBSD.ORG Subject: Re: Kernel error?? Hacked?? Bad NIC?? Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Mon, 25 Mar 2002 10:06:05 -0800 From: Dave Hayes Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org krzysztof Strzelczyk writes: > Interface fxp0 > IP is xxx.xxx.xxx.11 > alias0 is xxx.xxx.xxx.4 > alias1 is xxx.xxx.xxx.15 If the alias1 was the last command you did, this would also look like the behavior I would expect from an arp cache that took only the very last IP entry and assigned that to your MAC address. Just a thought. ------ Dave Hayes - Consultant - Altadena CA, USA - dave@jetcafe.org >>> The opinions expressed above are entirely my own <<< Nasrudin was sitting talking with a friend as dusk fell. "Light a candle", the man said, "because it is dark now. There is one just by your left side." "How can I tell my right from my left in the dark, you fool?" came the reply. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message