LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
 
Search this Thread
Old 05-31-2002, 01:52 AM   #1
saavik
Member
 
Registered: Nov 2001
Location: NRW, Germany
Distribution: SLES11 / FC20/ OES / CentOS
Posts: 607

Rep: Reputation: 32
what does martian source mean?


/var/log/messges says:

May 31 07:18:25 linux kernel: NET: 2 messages suppressed.
May 31 07:18:25 linux kernel: martian source xxx.xxx.xxx.xxx from xxx.xxx.xxx.xx
4, on dev eth0

but what does that mean?
 
Old 05-31-2002, 08:30 AM   #2
TruckStuff
Member
 
Registered: Apr 2002
Posts: 498

Rep: Reputation: 30
A martian is usually either a spoofed or source routed packet.
 
Old 06-04-2002, 07:18 AM   #3
saavik
Member
 
Registered: Nov 2001
Location: NRW, Germany
Distribution: SLES11 / FC20/ OES / CentOS
Posts: 607

Original Poster
Rep: Reputation: 32
so what does that mean

that i have a client in my net that is not conform to the other ip adresses and that my nic notices traffic to that ip?
or what?
 
Old 06-04-2002, 08:17 AM   #4
kahuna
Member
 
Registered: Jun 2002
Location: Grand Rapids, MI
Distribution: Redhat, Slackware
Posts: 78

Rep: Reputation: 15
Yes, say if your network is 10.0.0.0/24 and you set up a 192.168.0.0/24 host on the network and turn on logging, some packets from the 10.0.0.0 net will show up as martians.
 
Old 06-04-2002, 08:34 AM   #5
saavik
Member
 
Registered: Nov 2001
Location: NRW, Germany
Distribution: SLES11 / FC20/ OES / CentOS
Posts: 607

Original Poster
Rep: Reputation: 32
ok

thank you,
so i understood!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
getting martian source messages linuxboy69 Linux - Security 16 10-08-2005 12:08 PM
martian source from my own IP? yapp Linux - Security 4 03-30-2005 06:36 PM
martian source saavik Linux - Networking 0 07-02-2003 02:47 AM
martian source baffling me? Pcghost Linux - Networking 3 04-01-2003 08:43 PM
Martian source! Why now? Jon- Linux - Networking 1 03-05-2002 06:14 PM


All times are GMT -5. The time now is 05:46 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration