Packets from Martian source

[Uldis]

We noticed some problems in the local office network, it became slow etc. Checking the router logs, we found a big amount of entry appears like this.
May 23 15:50:32 router kernel: Martian source from 10.92.117.128 192.168.0.254, on dev eth2
May 23 15:50:32 router kernel: ll header: ff: ff: ff: ff: ff: ff: 00:23:76: dd: 3f: c1: 08:06
I know what

 

[Slug]

Hello and welcome!

I moved your query to our Computers & IT section, as several members who look in here have extensive networking experience and may be able to assist you.

 

[nigsy]

I've read issues of D-link routers causing the issues with invalid IP addresses. Maybe just updating the firmware on the router would be enough.

Could it be that someones phone is trying to connect to a service, but is incorrectly configured?

It's a pain, but block all the MAC addresses and then let them through one at a time and see which one throws up the error.

 

[Slug]

Dunno if this is related Uldis, but I found this while browsing my ISP's support forums. It appears that certain Android versions can exhibit DHCP-related "bugs". As I haven't a clue what a "Martian source" packet is I'm simply throwing this in to the mix on the off-chance it's useful to you.

 

[andruoid]

10.0.0.0 - 10.255.255.255 is an IP block reserved for private use; 10.92.117.128 falls into that range, just like your 192.168.*.*

 

[andruoid]

Also, that MAC addy; 00:23:76 prefix is from HTC.http://www.google.com/search?q=HTC Corporation