 | | | Ping duplicates | Ping duplicates 2004-08-18 - By Tsutomu
Back
run dmesg or check /var/log/messages file see if you see any
complaints about duplicate ips. if you see something it will tell you
what the source mac address which is trying to be your address. you
should be able to follow it from there
-T
On Tue, 17 Aug 2004 11:46:08 -0500, Michael Weber
<mweber@(protected)> wrote:
> It might also be a bad NIC, or one stuck in promiscuous mode. Do you
> have an IDS running on the net?
>
> Start with the tcpdump idea and check the mac addresses.
>
> Another possibility is that you have been hacked and someone has a
> system sucking all your network traffic looking for usernames and
> passwords.
>
> But, then again, paranoia is in my job description.
>
> -Michael
>
> >>> jmeagher@(protected) 08/17/04 10:57AM >>>
>
>
> Harry Hambi wrote:
>
> >I'me now getting duplicates from different ip's on the same subnet.
> >
> >Harry.
> >
> >
> Can you disconnect an offending host and see if both replies go away?
> Maybe there are two paths back to the pinger.
>
> __ ____ ____ ____ ____ ____ ____ ____ ____ ____
> Valhalla-list mailing list
> Valhalla-list@(protected)
> https://www.redhat.com/mailman/listinfo/valhalla-list
>
> __ ____ ____ ____ ____ ____ ____ ____ ____ ____
> Valhalla-list mailing list
> Valhalla-list@(protected)
> https://www.redhat.com/mailman/listinfo/valhalla-list
>
__ ____ ____ ____ ____ ____ ____ ____ ____ ____
Valhalla-list mailing list
Valhalla-list@(protected)
https://www.redhat.com/mailman/listinfo/valhalla-list
|
|
|