Date: Thu, 18 Jul 2002 14:24:29 -0600 From: "Duncan Patton a Campbell is Dhu" <campbell@neotext.ca> To: "Craig Miller" <craig@millerfam.net>, "freebsd-security" <freebsd-security@FreeBSD.ORG> Subject: Re: wierdness in my security report Message-ID: <20020718202429.M96897@babayaga.neotext.ca> In-Reply-To: <006301c22e83$2b3d5b30$fe01a8c0@Desktop> References: <006301c22e83$2b3d5b30$fe01a8c0@Desktop>
next in thread | previous in thread | raw e-mail | index | archive | help
Further, it is possible that some other machine is trying to
hijack the
.1 ip address.
As for the /kernel part, this could be an artifact of logging (
like, the
code might just say "logerr("system /kernel %s"... )"
somewhere...
Duncan Patton a Campbell is Duibh ;-)
---------- Original Message -----------
From: "Craig Miller" <craig@millerfam.net>
To: "freebsd-security" <freebsd-security@FreeBSD.ORG>
Sent: Thu, 18 Jul 2002 10:47:21 -0700
Subject: wierdness in my security report
> Anyone have any ideas as to what might be causing the
> following to appear in my security report?
>
> arp: 12.236.220.1 moved from 00:b0:64:b7:6f:54 to
> 00:b0:64:b7:6f:a8 on dc0
> > Jul 17 05:47:56 server /kernel: arp: 12.236.220.1 moved from
00:b0:64:b7:6f:54 to 00:b0:64:b7:6f:a8 on dc0
> > arp: 12.236.220.1 moved from 00:b0:64:b7:6f:a8 to
00:b0:64:b7:6f:54 on dc0
> > Jul 17 05:47:57 server /kernel: arp: 12.236.220.1 moved from
00:b0:64:b7:6f:a8 to 00:b0:64:b7:6f:54 on dc0
>
> I thought those : delimited fields would be MAC
> addresses, but they don't match the MAC addresses of
> either of the two cards in my free-bsd box. I have
> not checked the MAC addresses of the other network
> cards on my network.
>
> Also, where does the "server /kernel" name come from.
> "kernel" is not the name I gave my kernel, so I am suspicious.
>
> Thanks,
>
> --Craig
------- End of Original Message -------
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020718202429.M96897>