我一直在/ var / log / messages中收到这些消息:
Mar 8 23:17:25 saas1 kernel: martian source 169.254.1.1 from 169.254.95.118,on dev usb0 Mar 8 23:17:25 saas1 kernel: ll header: ff:ff:ff:ff:ff:ff:00:21:5e:de:1b:be:08:06
每隔5秒钟就会有另一个报告完全相同.
我在169.254.95.118做了一个whois并且还收到了一条奇怪的消息:
http://whois.arin.net/rest/nets;q=169.254.95.118?showDetails=true&showARIN=false
This is the "link local" block. It was set aside for this special use in the Standards Track document,RFC 3927 and was further documented in the Best Current Practice RFC 5735,which can be found at: http://www.rfc-editor.org/rfc/rfc3927.txt http://www.rfc-editor.org/rfc/rfc5735.txt It is allocated for communication between hosts on a single link. Hosts obtain these addresses by auto-configuration,such as when a DHCP server cannot be found. A router MUST NOT forward a packet with an IPv4 Link-Local source or destination address,irrespective of the router's default route configuration or routes obtained from dynamic routing protocols. A router which receives a packet with an IPv4 Link-Local source or destination address MUST NOT forward the packet. This prevents forwarding of packets back onto the network segment from which they originated,or to any other segment.
解决方法
如果网络上的主机无法通过DHCP获取网络地址,则可以伪随机分配169.254.1.0到169.254.254.255的地址.所以它是一个没有连接互联网的接口.这就是ARIN告诉你的.如果有人试图向此地址发送内容,则称其为火星包.
什么插入usb0?