LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 06-12-2001, 04:24 PM   #1
bfloeagle
Member
 
Registered: Jun 2000
Location: Upstate New York
Distribution: Ubuntu
Posts: 158

Rep: Reputation: 30
Question Martian Source/Destination Logs


Basically my network was unable to connect to the Internet. My Linux box masq'ing for the network had the messages listed below on the screen. I tried bringing up and down all the eth cards to get their ip's again but that was a no go. Only a reboot solved this. I understand that they are called Martians because they are invalid internet ip's. What I would like to know is if they are somthing coming from my cable provider's network (like their DNS or DHCP servers) or from someone in my neighborhood not exactly sure of what they are doing.

BTW - It is not me (I hope) because I use Class C (192.168.XXX.XXX - these are class c right?) private addresses for my internal network.

Here is are some of the logs:
Jun 12 16:43:53 Voyager kernel: martian source 10.1.216.181 from 10.1.216.1, on dev eth1
Jun 12 16:43:53 Voyager kernel: ll header: ff:ff:ff:ff:ff:ff:00:d0:01:0d:b3:fc:08:06
Jun 12 16:43:54 Voyager kernel: martian source 10.1.216.139 from 10.1.216.1, on dev eth1
Jun 12 16:43:54 Voyager kernel: ll header: ff:ff:ff:ff:ff:ff:00:d0:01:0d:b3:fc:08:06
Jun 12 16:43:55 Voyager kernel: martian source 10.1.216.95 from 10.1.216.1, on dev eth1
Jun 12 16:43:55 Voyager kernel: ll header: ff:ff:ff:ff:ff:ff:00:d0:01:0d:b3:fc:08:06
Jun 12 16:43:56 Voyager kernel: martian source 10.1.218.79 from 10.1.216.1, on dev eth1
Jun 12 16:43:56 Voyager kernel: ll header: ff:ff:ff:ff:ff:ff:00:d0:01:0d:b3:fc:08:06
Jun 12 16:43:56 Voyager kernel: martian source 255.255.255.255 from 10.1.216.1, on dev eth1
Jun 12 16:43:56 Voyager kernel: ll header: ff:ff:ff:ff:ff:ff:00:d0:01:0d:b3:fc:08:00
Jun 12 16:43:56 Voyager kernel: martian source 255.255.255.255 from 10.1.216.1, on dev eth1
Jun 12 16:43:56 Voyager kernel: ll header: ff:ff:ff:ff:ff:ff:00:d0:01:0d:b3:fc:08:00
Jun 12 16:43:56 Voyager kernel: martian source 10.1.218.45 from 10.1.216.1, on dev eth1
Jun 12 16:43:56 Voyager kernel: ll header: ff:ff:ff:ff:ff:ff:00:d0:01:0d:b3:fc:08:06
Jun 12 16:43:56 Voyager kernel: martian source 10.1.216.34 from 10.1.216.1, on dev eth1
Jun 12 16:43:56 Voyager kernel: ll header: ff:ff:ff:ff:ff:ff:00:d0:01:0d:b3:fc:08:06
Jun 12 16:43:56 Voyager kernel: martian source 10.1.217.195 from 10.1.216.1, on dev eth1
Jun 12 16:43:56 Voyager kernel: ll header: ff:ff:ff:ff:ff:ff:00:d0:01:0d:b3:fc:08:06

Jun 12 16:49:52 Voyager kernel: martian destination 0.0.0.0 from 24.49.117.40, dev eth1
Jun 12 16:49:52 Voyager kernel: martian source 24.48.XX.X from 0.0.0.0, on dev eth1
Jun 12 16:49:52 Voyager kernel: ll header: ff:ff:ff:ff:ff:ff:00:04:5a:20:8f:28:08:00
Jun 12 16:49:53 Voyager kernel: martian destination 0.0.0.0 from 24.52.111.49, dev eth1
Jun 12 16:49:54 Voyager kernel: martian source 24.48.XX.X from 0.0.0.0, on dev eth1
Jun 12 16:49:54 Voyager kernel: ll header: ff:ff:ff:ff:ff:ff:00:04:5a:20:8f:28:08:00
Jun 12 16:49:55 Voyager kernel: martian source 24.48.XX.X from 0.0.0.0, on dev eth1
Jun 12 16:49:55 Voyager kernel: ll header: ff:ff:ff:ff:ff:ff:00:04:5a:20:8f:28:08:00

PS - 24.48.XX.X is the ip address of my ip's name servers. Thats is why I thought the trouble might be coming from their network.... And eth1 is my external interface.

Andy

PSS - the title was supposed to say Martian instead or Martion. I must have typpped toooo fast and not have speel chequeed it.

[Edited by bfloeagle on 06-12-2001 at 05:29 PM]
 
Old 06-12-2001, 11:55 PM   #2
mcleodnine
Senior Member
 
Registered: May 2001
Location: Left Coast - Canada
Distribution: s l a c k w a r e
Posts: 2,731

Rep: Reputation: 45
Next time instead of rebooting just renew the ip address. See the man pages for your client. Could be that you just have to send your 'hostname' to the DHCP server when you request an address.

The martians have never directly affected my cable or DSL connection, and I do get a bunch from my ISPs.

Terminology Alert!!!

One thing that really bugs me about DHCP is the poor choice in vocabulary. You 'lease' an address. To terminate the 'lease' you 'release' it. To get a new address or see if you can use the one you have you 'renew' it. It makes for some interesting phone support.
 
Old 06-13-2001, 06:42 AM   #3
bfloeagle
Member
 
Registered: Jun 2000
Location: Upstate New York
Distribution: Ubuntu
Posts: 158

Original Poster
Rep: Reputation: 30
Unhappy I think I tried that...

I think I have already tried that. Now if I am releasing the lease or renewing the IP, I am not sure. I did two things. First was ifdown and then ifup. It said there was no errors, but when I checked ifconfig, eth1 had not ip address. So I did pump, and the Martian log messages starting popping up like crazy on my console. It never finished and I had to manually stop it. So I rebooted and it seemed to work. Could my firewall have anything to do with this? (It loads after the card has been brought up during boot.) I used gShield (which uses iptables). Has anyone else seens this?

Andy

PS - I am not sure what you meant by man pages for my client.... Is there a man page for making your card use dhcp when it turns on?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
help ! Destination Unreachable ernvb Linux - Hardware 3 10-23-2005 11:09 PM
problem to print source address and destination address jooboo Programming 2 11-26-2003 03:24 PM
How to delete the destination files while the source files deleted in cp -u ? myunicom Linux - General 4 09-26-2003 01:13 PM
iptables - source ? destination ? From where ? Dek Linux - Networking 3 04-30-2003 11:43 PM
Holiday Destination... X11 General 23 04-14-2002 11:53 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 06:46 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration