This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Message on Kernel log

Hi all,

I've been receiving lots of this error "IPv4: martian source " on the kernel log, should I have to worry?

2014:10:31-18:13:51 utm9-lan kernel: [710077.572284] IPv4: martian source 192.168.10.116 from 0.0.0.0, on dev eth1

2014:10:31-18:13:51 utm9-lan kernel: [710077.572291] ll header: 00000000: 7c 05 07 3c 79 8d 00 26 cb d5 a6 d9 08 00        |..<>

Thanks.

This thread was automatically locked due to age.

0 BAlfson over 10 years ago

That 0.0.0.0 is confusing. Do you have a remote access user connected via VPN on eth1? Is 192.168.10.0/24 even used on your UTM?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Crisman over 10 years ago in reply to BAlfson

That 0.0.0.0 is confusing. Do you have a remote access user connected via VPN on eth1? Is 192.168.10.0/24 even used on your UTM?

Cheers - Bob

I don't have any VPN connections and 192.168.10.0/24 is my internal addressing for LAN.

Thanks.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 10 years ago

It seems that a device using an IP of 192.168.10.116 is sending traffic from an Ethernet segment connected to eth1, and that that's not your Internal interface.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 10 years ago

As Bob alludes to, Martian traffic means that it is foreign (alien...get it, Martian) to the interface it is seen on. Most frequently I've seen this due to a routing loop.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel

Message on Kernel log

Submitted a Tech Support Case lately from the Support Portal?