Вот кусочек лога messages:
Aug 20 14:59:46 gate /kernel: arp: 192.168.219.28 moved from 00:11:11:1b:36:e5 to 00:08:c7:72:92:94 on fxp0
Aug 20 14:59:46 gate /kernel: arp: 192.168.219.28 moved from 00:08:c7:72:92:94 to 00:11:11:1b:36:e5 on fxp0
Aug 20 14:59:57 gate /kernel: arp: 192.168.219.28 moved from 00:11:11:1b:36:e5 to 00:08:c7:72:92:94 on fxp0
Aug 20 14:59:57 gate /kernel: arp: 192.168.219.28 moved from 00:08:c7:72:92:94 to 00:11:11:1b:36:e5 on fxp0
Aug 23 10:16:47 gate /kernel: arp: 192.168.219.28 moved from 00:08:c7:72:92:94 to 00:11:11:1b:36:e5 on fxp0
Aug 23 10:16:47 gate /kernel: arp: 192.168.219.28 moved from 00:11:11:1b:36:e5 to 00:08:c7:72:92:94 on fxp0
Sep 2 10:16:41 gate /kernel: arp: 192.168.219.28 moved from 00:08:c7:72:92:94 to 00:80:48:1d:cf:48 on fxp0
Sep 2 10:16:41 gate /kernel: arp: 192.168.219.28 moved from 00:80:48:1d:cf:48 to 00:08:c7:72:92:94 on fxp0
Sep 2 16:09:43 gate /kernel: cp0: Down event, continuing.
Sep 9 08:27:16 gate /kernel: cp0: Down event, continuing.
Sep 24 00:44:12 gate /kernel: cp0: Down event, continuing.
Sep 24 05:43:45 gate /kernel: cp0: Down event, continuing.
Sep 24 05:43:54 gate last message repeated 2 times
Oct 7 17:17:09 gate /kernel: arp: 192.168.219.28 moved from 00:08:c7:72:92:94 to 00:11:0a:1f:57:80 on fxp0
Oct 7 17:23:46 gate /kernel: arp: 192.168.219.28 moved from 00:11:0a:1f:57:80 to 00:08:c7:72:92:94 on fxp0
Oct 25 15:55:22 gate /kernel: arp: 192.168.219.28 moved from 00:08:c7:72:92:94 to 00:0e:7f:ff:55:60 on fxp0
Oct 25 15:55:22 gate /kernel: arp: 192.168.219.28 moved from 00:0e:7f:ff:55:60 to 00:08:c7:72:92:94 on fxp0
Oct 31 13:23:30 gate /kernel: arp: 192.168.219.28 moved from 00:08:c7:72:92:94 to 00:0e:7f:43:bc:b8 on fxp0
Oct 31 13:27:22 gate /kernel: arp: 192.168.219.28 moved from 00:0e:7f:43:bc:b8 to 00:08:c7:72:92:94 on fxp0
Nov 4 20:33:05 gate /kernel: arp: 192.168.219.21 moved from 00:11:11:1b:36:e5 to 00:e0:4c:39:25:ac on fxp0
Nov 4 20:33:06 gate /kernel: arp: 192.168.219.21 moved from 00:e0:4c:39:25:ac to 00:11:11:1b:36:e5 on fxp0
Nov 4 20:33:06 gate /kernel: arp: 192.168.219.21 moved from 00:11:11:1b:36:e5 to 00:e0:4c:39:25:ac on fxp0
Nov 4 20:33:07 gate /kernel: arp: 192.168.219.21 moved from 00:e0:4c:39:25:ac to 00:11:11:1b:36:e5 on fxp0
Nov 4 20:33:07 gate /kernel: arp: 192.168.219.21 moved from 00:11:11:1b:36:e5 to 00:e0:4c:39:25:ac on fxp0
Nov 4 20:33:08 gate /kernel: arp: 192.168.219.21 moved from 00:e0:4c:39:25:ac to 00:11:11:1b:36:e5 on fxp0
Nov 4 20:33:08 gate /kernel: arp: 192.168.219.21 moved from 00:11:11:1b:36:e5 to 00:e0:4c:39:25:ac on fxp0
Nov 4 20:43:15 gate /kernel: arp: 192.168.219.21 moved from 00:e0:4c:39:25:ac to 00:11:11:1b:36:e5 on fxp0
Nov 4 20:44:33 gate /kernel: arp: 192.168.219.21 moved from 00:11:11:1b:36:e5 to 00:e0:4c:39:25:ac on fxp0
Nov 4 20:51:42 gate /kernel: cp0: Down event, continuing.
Nov 5 14:06:23 gate /kernel: arp: 192.168.219.28 moved from 00:08:c7:72:92:94 to 00:02:e3:52:6a:ad on fxp0
Nov 5 14:06:23 gate /kernel: arp: 192.168.219.28 moved from 00:02:e3:52:6a:ad to 00:08:c7:72:92:94 on fxp0
Nov 7 18:55:08 gate /kernel: icmp redirect from 80.185.151.59: 192.168.2.2 => 80.24.173.194
Nov 7 18:55:57 gate last message repeated 9 times
Nov 7 19:16:05 gate /kernel: icmp redirect from 80.185.151.59: 192.168.2.2 => 80.24.173.194
Если я правильно понимаю:
arp: 192.168.219.28 moved from - имеется ввиду что IP пренадлижит теперь физически другой сетевухе (у меня DHCP стоит)?
kernel: cp0: Down event, continuing - а вот это не понимаю вообще ни как, cp0 поднят и смотрит в инет, проблем с ним ни когда не было ??
last message repeated 9 times - ? еще и в консоль мне эту фигню пишет постоянно
icmp redirect from 80.185.151.59: 192.168.2.2 => 80.24.173.194 - кто-то пытается ломать мою машину используя icmp redirect (который у меня заблокирован)? может и логи попыток отлючить?