Date: Thu, 16 Nov 2000 01:17:42 +0300 From: "deegreez [4ka]" <degreez_@4ka.mipt.ru> To: security@FreeBSD.org Subject: Re: unusual log in var/log/messages Message-ID: <723061181.20001116011742@4ka.mipt.ru> In-Reply-To: <3BF4369A.3030503@gmx.de> References: <bulk.9491.20011114170248@hub.freebsd.org> <3BF4369A.3030503@gmx.de>
next in thread | previous in thread | raw e-mail | index | archive | help
Hello Sven,
Friday, November 16, 2001, 12:41:46 AM, you wrote smth like:
SW> Hi,
SW> I recently discovered this entry in my messages-logfile
SW> " Nov 14 15:10:44 leo2 /kernel: arp: 137.226.141.33 moved from
SW> 00:40:33:39:80:d1 to 00:50:bf:7e:6e:70 on de0"
SW> is this a kind of attack or what?
SW> Cu
SW> Sven Wittig
i dont think its kind of attack..but it can be a kind of
man-in-the-middle sniffing realisations..
use arpwatch for more details about MAC/IP configuration of
hosts
--
Best regards,
deegreez mailto:degreez_@4ka.mipt.ru
and let da connect b with U!
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?723061181.20001116011742>