Hello List, seeing my Windows Firewall (ZoneAlarm) going crazy because of a PingScan, I switched to my Linux PC (SuSE 7.1) and startet ethereal to see whats goging one. Seeing tons of ICMP Echo request packages I took a look at my /var/log/messages (which has grown up to 8 MB so far) and I found the following entries (all the same, each second for about 18 min) Jun 4 16:01:36 <myHost> kernel: martian source 0b6edec3 for ff6edec3, dev eth0 Jun 4 16:01:36 <myHost> kernel: ll header: ff ff ff ff ff ff 00 08 c7 ea 7b 85 08 00 And about every minute this: Jun 4 16:02:10 <myHost> scanlogd: <otherIP> to <myIP> ports 47557, 699, 1059, 387, 714, 1014, 654, ..., fSrpauxy, TOS 00, TTL 46 @16:02:10 (myIP and otherIP are public IPs) Still learing about how networks work, I understand 80% of whats going on here. But what does the "martian source" source mean? Could anyone give me a hint, please? Thank you very much. Regards, phil