https://systemoverlord.com/tags/martian-packets.htmlRecent content in Martian Packets on System OverlordHugoen-usdavid@systemoverlord.com (David Tomaschik)david@systemoverlord.com (David Tomaschik)Sun, 06 Nov 2011 02:36:13 +0000https://systemoverlord.com/2011/11/06/martian-packet-messages/Sun, 06 Nov 2011 02:36:13 +0000david@systemoverlord.com (David Tomaschik)https://systemoverlord.com/2011/11/06/martian-packet-messages/<p> Occasionally, you might see messages like the following in your Linux kernel messages:</p> <blockquote><div class="geshifilter"> <div class="text geshifilter-text" style="font-family:monospace;"> <pre style="font-family: monospace; font-weight: normal; font-style: normal">martian source 192.168.1.1 from 127.0.0.1, on dev eth1&lt;br /&gt;         ll header: 52:54:00:98:99:d0:52:54:00:de:d8:10:08:00 </pre></div> </div> </blockquote> <p> There's a lot of discussion out there about what this means, but not a lot about how to trace down the source.  Hopefully this will provide some insight into what the messages actually mean, and how to understand them.</p>