A RIP routing update response was received from a machine that was not directly attached to the network the response came in on. Because normal RIP software is generally written to send data only to connected nets, this is probably indicative of a hostile event.