RE: Strange echo requests from 127.0.0.1apparentlytoroot nameservers

"Terje Trane" <[email protected]>
Newsgroups gmane.comp.security.intrusions
Message-ID <[email protected]>
Smith, Donald wrote:
> DEC made the tulip chipset. Which is commonly used in
> high-speed (GIGE)
> PCI network cards.
> Compaq bought DEC. So it could be a GIGE card or a Compaq
> system that is
> using this mac address.

True, but I have neither. PCs and servers are mostly Dells, and I have taken
up a list of all. I also run arpwatch on a linux-box on the subnet so I have
a list of all MACs it has seen the last two years!

> Does your local switch have a mac entry for this ethernet address?

No. So I guess it nevere leaves the machine. Might be som buggy beta version
of one of the many programs I have been testing on this machine.


_______________________________________________
Intrusions mailing list
[email protected]
http://www.dshield.org/mailman/listinfo/intrusions
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.