Package: arpwatch
Version: 2.1a13-2
Hello
arpwatch fills the log with these "flip flop" messages below.
These are generated by a server with two gigabit broadcom interfaces
"bonded" together.
man arpwatch says:
flip flop
The ethernet address has changed from the most recently seen address
to the second most recently seen address.
(If either the old or new ethernet address is a DECnet address and
it is less than 24 hours, the email version of the report is
suppressed.)
Is there really no way to supress these messages too in "IP ethernet"?
It would be usefull only to ignore exactly these "flip flop" as OTHO
an unexpected "flip flop" may indicate bad of course.
...
Aug 21 12:59:46 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:00:28 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:00:28 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:00:28 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:00:28 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:01:38 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:01:38 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:17:22 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:17:22 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:17:22 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:17:22 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:21:29 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:21:29 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:21:29 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:21:29 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:22:39 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:22:39 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:26:39 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:26:39 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:27:29 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:27:29 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:27:29 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:27:29 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:29:39 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:29:39 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:31:47 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:31:47 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:31:57 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:31:57 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:32:35 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:32:35 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:34:35 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:34:35 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:34:35 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:34:35 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:36:35 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:36:35 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:36:35 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:36:35 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:37:40 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:37:40 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:39:40 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:39:40 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:42:38 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:42:38 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:43:21 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:43:21 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:3 (0:3:3:3:3:1) eth0
Aug 21 13:43:21 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
Aug 21 13:43:21 srv arpwatch: flip flop 10.1.1.1 0:3:3:3:3:1 (0:3:3:3:3:3) eth0
...
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
