LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 08-03-2005, 12:36 AM   #1
hereshashi
LQ Newbie
 
Registered: Aug 2005
Location: India
Posts: 1

Rep: Reputation: 0
message in /var/log/messges


Hi,
I am getting this message non-stop in tail -f /var/log/messages. i am new to linux so please why is it coming and what is resolution.

NET: 489 messages suppressed.
ns1 kernel: martian source 0.0.0.240 from 0.0.0.240, on dev eth0
ns1 kernel: ll header: ff:ff:ff:ff:ff:ff:00:30:48:2b:6b:70:08:06
 
Old 08-03-2005, 03:28 PM   #2
Mara
Moderator
 
Registered: Feb 2002
Location: Grenoble
Distribution: Debian
Posts: 9,696

Rep: Reputation: 232Reputation: 232Reputation: 232
Moved: This thread is more suitable in Linux-Security and has been moved accordingly to help your thread/question get the exposure it deserves.

The messages show you that your machine's receiving large number of strange packets with addresses that don't make sense at all. It's mostly informative. If you're the admin, it may be a good idea to trace the source down. You have interface they are from (eth0) and MAC number of the card that sent them (it may be false, but is worth checking). If you check all your machines and their NICs, you should be able to find it.
 
Old 08-03-2005, 08:00 PM   #3
inaki
Member
 
Registered: Mar 2005
Posts: 94

Rep: Reputation: 15
For me it can be called as a spoofing technnique. My suggestion is setup the ids like snort to capture the activity
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
message, message.1 in /var/log/ can be deleted for space? phpsharma Linux - Newbie 4 11-17-2004 12:23 PM
/var/log/kern.log message dimkal Linux - Hardware 1 05-08-2004 06:57 AM
got a /var/log/message.... gigi Linux - Software 0 01-19-2004 04:12 AM
Trigger script by message in /var/log/messages? Zoidy Linux - Software 3 01-17-2004 12:03 AM
Odd recurring message in /var/log/messages tarballedtux Linux - General 4 05-21-2003 08:28 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 07:59 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration