-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On Thursday 08 June 2006 05:55, you wrote:
The quickest way would be to run a network trace, for example ethereal, until you've captured a few of these packets. Then you can see what it's trying to do, and that should give some idea about what's going on
That is what I have been trying to do. I do not see any real clue as what is sending it.
Do you see the martian address in the traces? If so, could you post some details, like what ports the martian address tries to use?
I am seeing this a lot. Always the same, just time is changing. It was
the first 1-5 of what I captured.
No. Time Source Destination Protocol
Info
2 0.613500 192.168.30.32 Broadcast ARP
Who has 192.168.30.32? Gratuitous ARP
Frame 2 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 192.168.30.32 (00:0e:0c:4a:83:11), Dst: Broadcast
(ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
- --
Boyd Gerber