kernel problem

This is a discussion on kernel problem within the Linux Security forums, part of the System Security and Security Related category; Nov 27 00:25:28 kernel: NET: 4 messages suppressed. Nov 27 00:25:28 kernel: MASQUERADE: Route sent us ...


Go Back   Usenet Forums > System Security and Security Related > Linux Security

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 11-27-2004
Bartosz Kowalski
 
Posts: n/a
Default kernel problem

Nov 27 00:25:28 kernel: NET: 4 messages suppressed.
Nov 27 00:25:28 kernel: MASQUERADE: Route sent us somewhere else
oraz
Nov 27 00:25:28 kernel: NET: 40 messages suppressed.
Nov 27 00:25:28 kernel: martian source 192.168.0.132 from
69.196.145.136, on dev eth2
Nov 27 00:25:28 kernel: ll header: 00:0a:5e:3d:49:54:00:0b:23:4f:07:e5:08:00

What is this? I have problems witch routing its happend sudenly.
Reply With Quote
  #2 (permalink)  
Old 11-27-2004
Daniel aka SoR
 
Posts: n/a
Default Re: kernel problem

Bartosz Kowalski napisaƂ(a):
> Nov 27 00:25:28 kernel: NET: 4 messages suppressed.
> Nov 27 00:25:28 kernel: MASQUERADE: Route sent us somewhere else
> oraz
> Nov 27 00:25:28 kernel: NET: 40 messages suppressed.
> Nov 27 00:25:28 kernel: martian source 192.168.0.132 from
> 69.196.145.136, on dev eth2
> Nov 27 00:25:28 kernel: ll header:
> 00:0a:5e:3d:49:54:00:0b:23:4f:07:e5:08:00
>
> What is this? I have problems witch routing its happend sudenly.


You should chceck your computers in network or switches, probably your
network has a virus (MyDoom, Sasser, Blaster or some like this)

Daniel
Reply With Quote
  #3 (permalink)  
Old 11-28-2004
Israel Lopez
 
Posts: n/a
Default Re: kernel problem

Do a TCPDump of your network.... and see what traffic is coming through.

I usually see that on machines here when we get a massive UDP DoS.

-Israel

"Bartosz Kowalski" <pulapka-newsgrupy@usunto.yahoo.com> wrote in message
news:co8o79$iqf$2@nemesis.news.tpi.pl...
> Nov 27 00:25:28 kernel: NET: 4 messages suppressed.
> Nov 27 00:25:28 kernel: MASQUERADE: Route sent us somewhere else
> oraz
> Nov 27 00:25:28 kernel: NET: 40 messages suppressed.
> Nov 27 00:25:28 kernel: martian source 192.168.0.132 from 69.196.145.136,
> on dev eth2
> Nov 27 00:25:28 kernel: ll header:
> 00:0a:5e:3d:49:54:00:0b:23:4f:07:e5:08:00
>
> What is this? I have problems witch routing its happend sudenly.



Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT +1. The time now is 02:19 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0