HELP / hacked??? take a look
I was looking at the log and came across several lines like this, could some one please tell me what they mean. kernel: packet log input ACCEPT eth1 PROTO=6 209.214.177.19:1111 <my etho>:80 L=48 S=0x00 I=7174 F=0x4000 T=107 SYN (#24) then I have a few lines at the end like kernel: martian source a4060a18 for 0afa04a6, dev eth0 kernel: ll header: ff ff ff ff ff ff 00 e0 29 46 64 5d 08 06 ANY help/insight to this would be greatly appreciated. TIA I am using IPCHAINS, SuSE6.3, kernel 2.2.13, Apache (for my daughters website)
At 21 Feb 00, um 7:47 Jonathan wrote:
kernel: martian source a4060a18 for 0afa04a6, dev eth0 kernel: ll header: ff ff ff ff ff ff 00 e0 29 46 64 5d 08 06
I had those msgs also a few weeks ago. It means there is a packet with a source address 'not from earth'. In my case there was a WS on the internal net misconfiguratet to be in 10.0.0.0 mfg Andreas Andreas Kunberger -- Dipl.-Ing. Andreas Kunberger Institut fuer Textil- und Verfahrenstechnik Universitaet Stuttgart
participants (2)
-
Andreas Kunberger
-
Jonathan