Mailinglist Archive: opensuse (3637 mails)

< Previous Next >
Martian Destination
  • From: "Stan Koper" <skoper@xxxxxxxxxxxx>
  • Date: Thu, 24 May 2001 07:01:50 -0400
  • Message-id: <001001c0e441$f326fe40$020aa8c0@xxxxxxxxxxxxxxx>
I know that this has been discussed in the past, but I've been particularly
plagued lately by
an enormous number of martian destination messages, to whit:

May 22 07:17:30 alembic kernel: martian destination 00000000 from a7f36041,
dev eth0
May 22 07:17:30 alembic kernel: martian destination 00000000 from 7ff36041,
dev eth0
May 22 07:17:30 alembic last message repeated 4 times
May 22 07:17:31 alembic kernel: martian destination 00000000 from a7f36041,
dev eth0
May 22 07:17:31 alembic kernel: martian destination 00000000 from b5f26041,
dev eth0
May 22 07:17:31 alembic kernel: martian destination 00000000 from 7ff36041,
dev eth0
May 22 07:17:35 alembic kernel: NET: 30 messages suppressed.
May 22 07:17:35 alembic kernel: martian destination 00000000 from 7ff36041,
dev eth0
May 22 07:17:40 alembic kernel: NET: 14 messages suppressed.
May 22 07:17:40 alembic kernel: martian destination 00000000 from 7ff36041,
dev eth0
May 22 07:17:45 alembic kernel: NET: 26 messages suppressed.
May 22 07:17:45 alembic kernel: martian destination 00000000 from 7ff36041,
dev eth0

And that's just a brief sample. The messages from a7f and b5f seem to have
dropped away,
but 7ff keeps at it. If my translation from hex is correct, this would be a
message
from 65.96.243.127.

I'm on a cable modem, and the current IP assigned to my machine is
65.96.242.72.
I run a small internal network, using the 198.162. internal IP addresses.

Funny thing, I ran arpwatch for a while, which generates tons of email
reporting various
IP addresses active on my node (new station, reused old internet address,
flip flop, etc.)
but I don't seem to see 65.96.243.127 reported (unless I've mistranslated
the hex
number, always a possibility).

Anyway, can anyone suggest what this might be about? I'd like to know more
before I
complain to abuse@xxxxxxxxxxxx (or whatever they're called these days).

TIA,

Stan Koper


< Previous Next >
This Thread
  • No further messages