Hi, I have the following martian over and over my log files.
Mar 20 09:36:45 tptrtr kernel: martian source 00000000 for ff01a8c0, dev eth1 Mar 20 09:36:45 tptrtr kernel: ll header: ff ff ff ff ff ff 00 50 04 a4 f2 09 08 00 If I decode it: Source Destination 00000000 ff01a8c0 0.0.0.0 192.168.1.255 I understand this is a broadcast. Dest Mac Address?? Src Mac Addres?? TCP?? ff ff ff ff ff ff 00 50 04 a4 f2 09 08 00 Using Ethereal to log packets I got It is an IPX NCP packet with destination port SAP (Service Advertizing Protocol????) I do have an IPX network. But this messages appeared a couple of day ago. Excuse my ignorance but how does an IPX packet to handled and logged in LRP (DCD 1.02) as a TCP packet??? Any hints in how can I trace the offending machine. Not resourcing to look at every M$ or Netware computer MAC address. I mean is there any scientific way of tracing this down?? Thanks all Sergio _______________________________________________ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
