Hilfe! Kernelmeldung??

Post Reply
Message
Author
Alex

Hilfe! Kernelmeldung??

#1 Post by Alex »

Leider haben meine Frage einige für lustig gehalten <img src="http://www.pl-forum.de/UltraBoard/Images/Sad.gif" border="0" align="middle">(

Also nochmal:
Ich bekomme hier auf /var/log/warn
Kernelmeldungen leider weiß ich nicht was sie bedeuten, bzw. was ich dagegen machen kann..

Aug 21 08:12:29 grtreiberlin01 kernel: NET: 7 messages suppressed.
Aug 21 08:12:29 grtreiberlin01 kernel: martian source 0f3360c0 for ff3360c0, dev eth1
Aug 21 08:12:29 grtreiberlin01 kernel: ll header: ff ff ff ff ff ff 00 01 02 a4 3b 5e 08 00
Aug 21 08:12:29 grtreiberlin01 kernel: martian source 0f3360c0 for ff3360c0, dev eth1
Aug 21 08:12:29 grtreiberlin01 kernel: ll header: ff ff ff ff ff ff 00 01 02 a4 3b 5e 08 00
Aug 21 08:12:31 grtreiberlin01 kernel: NET: 1 messages suppressed.
Aug 21 08:12:31 grtreiberlin01 kernel: martian source 0f3360c0 for ff3360c0, dev eth1
Aug 21 08:12:31 grtreiberlin01 kernel: ll header: ff ff ff ff ff ff 00 01 02 a4 3b 5e 08 00
Aug 21 08:12:36 grtreiberlin01 kernel: NET: 3 messages suppressed.
Aug 21 08:12:36 grtreiberlin01 kernel: martian source 0f3360c0 for ff3360c0, dev eth1
Aug 21 08:12:36 grtreiberlin01 kernel: ll header: ff ff ff ff ff ff 00 01 02 a4 3b 5e 08 00
Aug 21 08:12:41 grtreiberlin01 kernel: NET: 13 messages suppressed.

Sebastian Ude

Re: Hilfe! Kernelmeldung??

#2 Post by Sebastian Ude »

> Leider haben meine Frage einige für lustig gehalten

Das sollte nicht vorkommen.


Aus http://sourceforge.net/docman/display_d ... p_id=13751:


<i>From: Gary Mart gmart@coinet.com</i>

Many have asked, "Why do I get these martian source messages?"
<blockquote><pre><font size="1" face="">code:</font><hr><font face="Courier New" size="2">
martian source df00a8c0 for 0200a8c0, dev eth1

ll header: 00 e0 29 40 d3 b9 00 00 e8 10 10 f6 08 00
</font><hr></pre></blockquote>
Packets that come to you from a source not consistent with the routing statements for an interface are from way out there somewhere, like Mars, hence martian source. If the line read:
<blockquote><pre><font size="1" face="">code:</font><hr><font face="Courier New" size="2">
martian source df00a8c0 for 0200a8c0, dev eth1

ll header: 00 e0 29 40 d3 b9 00 00 e8 10 10 f6 08 00
</font><hr></pre></blockquote>
you might have a clue as to what machine is sending ``martial packets''.

To really check out it out use this information:

The 00:e0:29:40:d3:b9 is the mac address of your ethernet card and 00:00:e8:10:10:f6 is the mac address of the senders ethernet card 08 00 is the type of the ethernet packet, and if memory serves me 0800 is ip.

<b>
The messages are harmless except for cluttering up your screen and/or log files. However, they may be your clue as to unwanted traffic and/or hosts on your network.
</b>

Alex

Re: Hilfe! Kernelmeldung??

#3 Post by Alex »

Danke!!!

Post Reply