[rbak-nsp] Unsolicited ARP ?

Marcin Kuczera marcin at leon.pl
Tue Jul 16 15:58:13 EDT 2013


Hello,

recently in log files I have:
Jul 16 19:46:23: %ARP-6-INFO: Unsolicited ARP reply from 192.168.200.254 
(00:1c:b0:cb:b4:00)
Jul 16 19:46:23: %ARP-6-INFO: Unsolicited ARP reply from 192.168.200.254 
(00:1e:f7:41:68:c0)
Jul 16 19:46:23: %ARP-6-INFO: Unsolicited ARP reply from 192.168.200.254 
(00:0a:8b:e5:7b:80)
Jul 16 19:46:23: %ARP-6-INFO: Unsolicited ARP reply from 192.168.200.254 
(00:d0:01:ef:1c:0a)
Jul 16 19:46:23: %ARP-6-INFO: Unsolicited ARP reply from 192.168.200.254 
(00:1c:0f:5f:71:c0)

sometimes from public IPs (subcribers IPs)

Is it some virus trying to steal other's IP ?

Regards,
Marcin



More information about the redback-nsp mailing list