Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am trying to investigate the source of martian packets I have been seeing on several servers connected to the same subnet. The logging of martian packets has been enabled in /etc/sysctl.conf.

However when viewing the entries in /var/log/messages I only see the following for each martian packet:

2013-08-26T12:15:03-04:00 hostname kernel: martian destination 0.0.0.0 from 15.16.0.0, dev eth0

I would expect to see a second line similar to the following along with this above line:

2013-08-26T12:15:03-04:00 hostname kernel: ll header:ff:ff:ff:ff:ff:ff:00:21:5e:de:1b:be:08:06

I have been searching but have been unable to determine why the above line is not being logged along with the initial martian packet being logged. Anyone have any ideas?

share|improve this question

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.