* Miguel Albuquerque wrote on Mon, Nov 25, 2002 at 20:15 +0100:
I've noticed that since I installed a new network card, I have lots of "martian sources" on dev eth1 which it happens to be down.
You mean, when the interface went down, you get martian sources?
It looks like it grabs all broadcast/martian packets in the active netcard.
I think this interface really sees that packets on wire. On sws.dett.de, I put this: perl -e '$a=shift;{printf "%d.%d.%d.%d\n", ("0x" . substr($a,6,2)), ("0x" . substr($a,4,2)), ("0x" . substr($a,2,2)), ("0x" . substr($a,0,2));}' <hexstring> steffen@dx:~ > perl -e '....' ff01a8c0 192.168.1.255 to translate the hex dump to a dotted-quad notation IP (works for intel byte order :)). Maybe you have some windows 2000 with such an ugly link local address or some multicast, check it out. oki, Steffen -- Dieses Schreiben wurde maschinell erstellt, es trägt daher weder Unterschrift noch Siegel.