Subject: Re: ntpd and strange ipv6 address in logs
To: Matthias Scheler <tron@zhadum.org.uk>
From: Denis Lagno <dlagno@rambler.ru>
List: current-users
Date: 02/01/2007 17:42:37
* Matthias Scheler <tron@zhadum.org.uk> [Thu, 1 Feb 2007 14:36:09 
+0000]:
> On Thu, Feb 01, 2007 at 05:04:02PM +0300, Denis Lagno wrote:
> > >There isn't by any change a Debian Linux box on the local subnet
> which
> > >is running a rogue 6to4 tunnel?
> >
> > I am not aware of any Debians or 6to4 tunnels around me.  But I am
> > connected to my provider over ethernet, and there can be virtually
> > anything in my local subnet.
>
> What does "ifconfig -a" print out on your system?

# ifconfig -a
ex0: flags=8863<UP,BROADCAST,NOTRAILERS,RUNNING,SIMPLEX,MULTICAST> mtu 
1500
        capabilities=3f00<IP4CSUM_Rx,IP4CSUM_Tx,TCP4CSUM_Rx,TCP4CSUM_Tx,UDP4CSUM_Rx,UDP4CSUM_Tx>
        enabled=3f00<IP4CSUM_Rx,IP4CSUM_Tx,TCP4CSUM_Rx,TCP4CSUM_Tx,UDP4CSUM_Rx,UDP4CSUM_Tx>
        address: 00:10:4b:67:87:27
        media: Ethernet autoselect (100baseTX full-duplex)
        status: active
        inet 10.239.17.213 netmask 0xffff0000 broadcast 10.239.255.255
        inet6 fe80::210:4bff:fe67:8727%ex0 prefixlen 64 scopeid 0x1
ex1: 
flags=8a63<UP,BROADCAST,NOTRAILERS,RUNNING,ALLMULTI,SIMPLEX,MULTICAST> 
mtu 1500
        address: 00:60:98:ef:e3:5d
        media: Ethernet autoselect (100baseTX full-duplex)
        status: active
        inet 192.168.0.11 netmask 0xffffff00 broadcast 192.168.0.255
        inet6 fe80::260:98ff:feef:e35d%ex1 prefixlen 64 scopeid 0x2
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 33192
        inet 127.0.0.1 netmask 0xff000000
        inet6 ::1 prefixlen 128
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
pflog0: flags=0 mtu 33192
ppp0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500
        inet 89.178.98.106 -> 195.14.38.10 netmask 0xff000000
        inet6 fe80::210:4bff:fe67:8727%ppp0 ->  prefixlen 64 scopeid 0x5