Subject: Re: magic network message - please help
To: None <netbsd-users@NetBSD.org>
From: Ignatios Souvatzis <ignatios@cs.uni-bonn.de>
List: netbsd-users
Date: 06/27/2005 12:28:23
--TakKZr9L6Hm6aLOc
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, Jun 24, 2005 at 02:56:35PM +0200, Ignatios Souvatzis wrote:
> On Thu, Jun 23, 2005 at 04:58:17PM -0400, Chuck Swiger wrote:
> > Wojciech Puchar wrote:
> > >could someone please translate this message into english?
> > >
> > >sip0: arp: link address is broadcast for IP address 0.80.252.206!
> >=20
> > Your sip0 network interface saw traffic which came from an IP address w=
hich=20
> > is supposed to be reserved for the (subnet) broadcast address. =20
>=20
> No. It says _link_ address is broadcast. Some machine out there is claimi=
ng
> it's own Ethernet MAC is the Ethernet broadcast address (ff:ff:ff:ff:ff:f=
f).
>=20
> Find that machine, and cut^Wdisconnect it's cable, fast, before it fries
> your network. Then analyze.

WP told me in a private message, that he only saw that message once.
In this case, it might be a bad contact occasionally inserting streams
of 1's, 0's, or 1-0 sequences together with an active network
component (e.g. switch) that's stupid enough not to throw away packets
with broken Ethernet CRC, but "intelligent" enough to regenerate the=20
CRC when forwarding.=20

Regards,
	-is

--TakKZr9L6Hm6aLOc
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: 2.6.i

iQEVAgUBQr/UxTCn4om+4LhpAQFOOwgAp2JFgNA0Pd2uXxNFOY57jcvS0IHGnFMq
WJxHKjLXYhoWxqCGcVe8V+0LrAULBIRLd9mv1JHtDbMLCwaOE6DpIjs8OmH+CKbX
DDlHc2tSYbFRGrN380rfsa1o+2vHVS+Phw8zH0Xz0mnmdi4LNQwDLAgozFlGXXtz
7ZAkmO2mFTqEVC/bu5csDC3bF9dY31vUeoIG5vBZifJ5GzqaSJEca4O6RGNrJ7Ft
jOWc7lID7Vhu5bicslnF2/sy1RZBALSUBo2TgZffCRYHHjRIDO6cZDq+1yytKnb1
/vAJE2Ln4OC6in80+9V/rO1aiXnUYFQr+tKIyCHI2tlDoVFvObnPww==
=ZriH
-----END PGP SIGNATURE-----

--TakKZr9L6Hm6aLOc--