Strange IP activity in my syslog

RyanRahl · 05-24-2011, 01:50 PM

I found this is my syslog and I don't know what it means. Does anyone here know what this is about. The censored IP is obviously mine and the others are coming from Romania.

Code:

May 24 11:41:25 sleppery kernel: [56376.420012] Redirect from 89.33.12.29 on eth1 about 89.33.12.203 ignored.
May 24 11:41:25 sleppery kernel: [56376.420015]   Advised path = 74.94.*.* -> 89.33.12.203

AlucardZero · 05-24-2011, 02:32 PM

From The Google:

Your host is receiving ICMP redirect packets from the specified Ip address. An ICMP redirect is an error message sent by a router to the sender of an IP packet . Redirects are used when a router believes a packet is being routed sub optimally and it would like to inform the sending host that it should forward subsequent packets to that same destination through a different gateway.

icmp redirect is only honored when it redirects to another host in your subnet. Unless you have a really large subnet, this looks like nonsense. The kernel will ignore it if it redirects you outside of your subnet.