Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to investigate the source of martian packets I have been seeing on several servers connected to the same subnet. The logging of martian packets has been enabled in /etc/sysctl.conf.

However when viewing the entries in /var/log/messages I only see the following for each martian packet:

2013-08-26T12:15:03-04:00 hostname kernel: martian destination from, dev eth0

I would expect to see a second line similar to the following along with this above line:

2013-08-26T12:15:03-04:00 hostname kernel: ll header:ff:ff:ff:ff:ff:ff:00:21:5e:de:1b:be:08:06

I have been searching but have been unable to determine why the above line is not being logged along with the initial martian packet being logged. Anyone have any ideas?

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.