From owner-freebsd-current  Sun Apr 14 15:45:17 2002
Delivered-To: freebsd-current@freebsd.org
Received: from swan.prod.itd.earthlink.net (swan.mail.pas.earthlink.net [207.217.120.123])
	by hub.freebsd.org (Postfix) with ESMTP
	id 6B98137B404; Sun, 14 Apr 2002 15:45:14 -0700 (PDT)
Received: from pool0030.cvx40-bradley.dialup.earthlink.net ([216.244.42.30] helo=mindspring.com)
	by swan.prod.itd.earthlink.net with esmtp (Exim 3.33 #1)
	id 16wskD-00012v-00; Sun, 14 Apr 2002 15:45:13 -0700
Message-ID: <3CBA065E.DD0AA010@mindspring.com>
Date: Sun, 14 Apr 2002 15:44:46 -0700
From: Terry Lambert <tlambert2@mindspring.com>
X-Mailer: Mozilla 4.7 [en]C-CCK-MCD {Sony}  (Win98; U)
X-Accept-Language: en
MIME-Version: 1.0
To: Steve Kargl <sgk@troutmask.apl.washington.edu>
Cc: John Baldwin <jhb@FreeBSD.org>,
	Glenn Gombert <ggombert@imatowns.com>, freebsd-current@FreeBSD.org,
	Rasmus Skaarup <mfbsd@skaarup.org>
Subject: Re: swi_net: unregistered isr number: 18
References: <3.0.6.32.20020414080107.00da8a48@imatowns.com> <XFMail.20020414090040.jhb@FreeBSD.org> <20020414091256.B61825@troutmask.apl.washington.edu>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-current.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-current>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-current>
X-Loop: FreeBSD.ORG

Steve Kargl wrote:
> On Sun, Apr 14, 2002 at 09:00:40AM -0400, John Baldwin wrote:
> > On 14-Apr-2002 Glenn Gombert wrote:
> > > I have seen the same message on a couple FreeBSD systems that I run over
> > > the last several months, but they both seem to be running fine. I was
> > > wondering if it was a 'hack attempt' of somekind over my DSL line....
> >
> > No it's a kernel bug of some sort.  I've only seen it on some test
> > kernels (not CVS kernels) during dhclient on my laptop.
> 
> This only started to happen on my system in the last week.
> I'm using dhclient.  Is the invocation of dhcp in the rc
> script done before the network code is completely set up?

Yes.  And/or someone is spoofing DHCP responses before any request
has been made at all, in order to perform a man in the middle attack.

-- Terry

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message