19 Aug 12, 12:28AM
Just guessing here, but how about if he runs ifconfig to see if this is some strange system-wide issue? See if the address there is in correct order. Also, if he watches server output while a client is connected, is the address in each line of that client's actions also backward, or is it only backward in whois?