Date: Sun, 14 Apr 2002 15:41:30 -0700 From: Terry Lambert <tlambert2@mindspring.com> To: Glenn Gombert <ggombert@imatowns.com> Cc: Rasmus Skaarup <mfbsd@skaarup.org>, Steve Kargl <sgk@troutmask.apl.washington.edu>, freebsd-current@freebsd.org Subject: Re: swi_net: unregistered isr number: 18 Message-ID: <3CBA059A.92AFD97C@mindspring.com> References: <20020413110740.A56925@troutmask.apl.washington.edu> <3.0.6.32.20020414080107.00da8a48@imatowns.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Glenn Gombert wrote: > I have seen the same message on a couple FreeBSD systems that I run over > the last several months, but they both seem to be running fine. I was > wondering if it was a 'hack attempt' of somekind over my DSL line.... You should read the code in /sys/i386/i386/machdep.c ... It means that you have received an ARP before the soft interrupt handler for it has been registered. See: <http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/net/netisr.h?rev=1.26&content-type=text/x-cvsweb-markup>; Probably it has to do with the use of interrupt threads in -current screwing up the order of initialization. What it means is that you "lost" an ARP response prior to the protocol handler for the NETISR being registered. Depending on whether or not the ARP request will be retried, this may cause a problem. Most likely, it's a response to an ARP sent out by your machine for DHCP in order to obtain the DHCP server. Given the context posted by someone else, this means things are being done in the wrong order in the kernel for dhclient... which basically means that it will just have to retry. This is consistent with them not complaining about not being able to get a DHCP lease, which would be the symptom you'd expect, if this were a persistent condition. In any case, it's *not* indicative of someone trying to hack you, unless what they are doing is spoofing DHCP responses to get you on an unroutable address on your local segment, so that your packets go through them, and they can man-in-the-middle attack you. -- Terry To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3CBA059A.92AFD97C>