Re: arp problem?
I installed the arping and arpinged at the mac and after at the ip and got the same binding of 00:10:b5:df:b5:ff to 10.101.10.47 So I changed ip from 10.101.10.47 host to 10.101.10.48 and I don't get the message anymore.. weired thing though... cause there is no other client with this ip 10.101.10.47.. thank you :) Erik Norgaard <[EMAIL PROTECTED]> wrote: spen wrote: > I get this message all the time and I 've searched around forums but did not > find something about it.. > > arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on > xl0 > arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on > xl0 > arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on > xl0 > arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on > xl0 > arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on > xl0 > > after many times of repeating itself I get a message which says "last message > repeated x times".. > does anybody have any idea about it? > ps: 10.101.10.47 is another pc on the local lan... It appears that some host is misconfigured and is attempting to use an ocupied ip: a) you have a static arp table with a different mac/ip. b) your own interface is configured for that ip and someone else is trying to use it. To investigate further: try using arping to find host with that mac and hosts with that ip. Cheers, Erik -- Ph: +34.666334818 web: www.locolomo.org S/MIME Certificate: www.daemonsecurity.com/ca/8D03551FFCE04F06.crt Subject ID: 9E:AA:18:E6:94:7A:91:44:0A:E4:DD:87:73:7F:4E:82:E7:08:9C:72 Fingerprint: 5B:D5:1E:3E:47:E7:EC:1C:4C:C8:3A:19:CC:AE:14:F5:DF:18:0F:B9 --spen-- - Yahoo! Messenger with Voice. PC-to-Phone calls for ridiculously low rates. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: arp problem?
spen wrote: I get this message all the time and I 've searched around forums but did not find something about it.. arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on xl0 arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on xl0 arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on xl0 arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on xl0 arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on xl0 after many times of repeating itself I get a message which says "last message repeated x times".. does anybody have any idea about it? ps: 10.101.10.47 is another pc on the local lan... You have a permanent entry in your ARP-table for that IP. But someone tries to use this IP on another computer, or NIC was changed on the PC with that IP. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: arp problem?
spen wrote: I get this message all the time and I 've searched around forums but did not find something about it.. arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on xl0 arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on xl0 arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on xl0 arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on xl0 arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on xl0 after many times of repeating itself I get a message which says "last message repeated x times".. does anybody have any idea about it? ps: 10.101.10.47 is another pc on the local lan... It appears that some host is misconfigured and is attempting to use an ocupied ip: a) you have a static arp table with a different mac/ip. b) your own interface is configured for that ip and someone else is trying to use it. To investigate further: try using arping to find host with that mac and hosts with that ip. Cheers, Erik -- Ph: +34.666334818 web: www.locolomo.org S/MIME Certificate: www.daemonsecurity.com/ca/8D03551FFCE04F06.crt Subject ID: 9E:AA:18:E6:94:7A:91:44:0A:E4:DD:87:73:7F:4E:82:E7:08:9C:72 Fingerprint: 5B:D5:1E:3E:47:E7:EC:1C:4C:C8:3A:19:CC:AE:14:F5:DF:18:0F:B9 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: arp problem in /var/log/messages
From: "Jack L. Stone" <[EMAIL PROTECTED]> > BTW, the Windows machines never did resolve the new NIC MAC after several > hours, but the FBSD's did within about an hour. Lesson learned. You can use "arp -d *" to delete the arp cache on windows. Kenneth Sundby ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: arp problem in /var/log/messages
Bjoern A. Zeeb wrote: On Tue, 20 Jan 2004, Mark wrote: But what causes them ? I get them too. I believe CISCO routers do this. I had a reference once but lost it. In my case the routers are somewhere on my ISPs network. --Alex ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: arp problem in /var/log/messages
On Tue, 20 Jan 2004, Mark wrote: > But what causes them ? I get them too. one host, two NICs same braodcast domain ? -- Bjoern A. Zeeb bzeeb at Zabbadoz dot NeT 56 69 73 69 74 http://www.zabbadoz.net/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: arp problem in /var/log/messages
On Tue, 20 Jan 2004, Mark wrote: > But what causes them ? I get them too. most likely two machines on your LAN who're using the same IP address. note that some implementations of redundancy will do the same. track the machine with the two ethernet addresses. Regards, /\_/\ "All dogs go to heaven." [EMAIL PROTECTED](0 0)http://www.alphaque.com/ +==oOO--(_)--OOo==+ | for a in past present future; do| | for b in clients employers associates relatives neighbours pets; do | | echo "The opinions here in no way reflect the opinions of my $a $b." | | done; done | +=+ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: arp problem in /var/log/messages
Probably some device on your network is using the same ip and they are fighting for it. I had this happen with Zeus load balancer and another system using the same ip. - Original Message - From: "Mark" <[EMAIL PROTECTED]> To: "horio shoichi" <[EMAIL PROTECTED]>; "Spades" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Wednesday, January 21, 2004 5:22 AM Subject: Re: arp problem in /var/log/messages > But what causes them ? I get them too. > > > > On Sun, 18 Jan 2004 20:14:29 +0800 > > "Spades" <[EMAIL PROTECTED]> wrote: > > > hi all, i got flooded by these msgs like 1000+ lines, any idea? > > > my kernel is dated Nov-30 FreeBSD 4.9-stable > > > > > > # tail -f /var/log/messages > > > Jan 18 19:43:23 xb /kernel: arp: 202.79.180.1 moved from > 00:04:5a:49:eb:74 > > > to 00:50:0f:4f:c0:00 on rl0 > > > Jan 18 19:45:06 xb /kernel: arp: 202.79.180.1 moved from > 00:50:0f:4f:c0:00 > > > to 00:04:5a:49:eb:74 on rl0 > > > Jan 18 19:45:18 xb /kernel: arp: 202.79.180.1 moved from > 00:04:5a:49:eb:74 > > > to 00:50:0f:4f:c0:00 on rl0 > > > Jan 18 19:45:41 xb /kernel: arp: 202.79.180.1 moved from > 00:50:0f:4f:c0:00 > > > to 00:04:5a:49:eb:74 on rl0 > > > Jan 18 19:45:45 xb /kernel: arp: 202.79.180.1 moved from > 00:04:5a:49:eb:74 > > > to 00:50:0f:4f:c0:00 on rl0 > > > > > > thanks and regards, > > > > > > John > > > > > > ___ > > > [EMAIL PROTECTED] mailing list > > > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > > > To unsubscribe, send any mail to > "[EMAIL PROTECTED]" > > > > > > > # sysctl net.link.ether.inet.log_arp_wrong_iface=1 > > > > should mask the messages. > > > > > > > > horio shoichi > > > > ___ > > [EMAIL PROTECTED] mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > > To unsubscribe, send any mail to > "[EMAIL PROTECTED]" > > > > > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "[EMAIL PROTECTED]" > ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: arp problem in /var/log/messages
But what causes them ? I get them too. > On Sun, 18 Jan 2004 20:14:29 +0800 > "Spades" <[EMAIL PROTECTED]> wrote: > > hi all, i got flooded by these msgs like 1000+ lines, any idea? > > my kernel is dated Nov-30 FreeBSD 4.9-stable > > > > # tail -f /var/log/messages > > Jan 18 19:43:23 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 > > to 00:50:0f:4f:c0:00 on rl0 > > Jan 18 19:45:06 xb /kernel: arp: 202.79.180.1 moved from 00:50:0f:4f:c0:00 > > to 00:04:5a:49:eb:74 on rl0 > > Jan 18 19:45:18 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 > > to 00:50:0f:4f:c0:00 on rl0 > > Jan 18 19:45:41 xb /kernel: arp: 202.79.180.1 moved from 00:50:0f:4f:c0:00 > > to 00:04:5a:49:eb:74 on rl0 > > Jan 18 19:45:45 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 > > to 00:50:0f:4f:c0:00 on rl0 > > > > thanks and regards, > > > > John > > > > ___ > > [EMAIL PROTECTED] mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > > To unsubscribe, send any mail to "[EMAIL PROTECTED]" > > > > # sysctl net.link.ether.inet.log_arp_wrong_iface=1 > > should mask the messages. > > > > horio shoichi > > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "[EMAIL PROTECTED]" > ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: arp problem in /var/log/messages
horio shoichi wrote: hi all, i got flooded by these msgs like 1000+ lines, any idea? my kernel is dated Nov-30 FreeBSD 4.9-stable # tail -f /var/log/messages Jan 18 19:43:23 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 to 00:50:0f:4f:c0:00 on rl0 Jan 18 19:45:06 xb /kernel: arp: 202.79.180.1 moved from 00:50:0f:4f:c0:00 to 00:04:5a:49:eb:74 on rl0 Jan 18 19:45:18 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 to 00:50:0f:4f:c0:00 on rl0 Jan 18 19:45:41 xb /kernel: arp: 202.79.180.1 moved from 00:50:0f:4f:c0:00 to 00:04:5a:49:eb:74 on rl0 Jan 18 19:45:45 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 to 00:50:0f:4f:c0:00 on rl0 # sysctl net.link.ether.inet.log_arp_wrong_iface=1 should mask the messages. Shouldn't that be net.link.ether.inet.log_arp_movements ? myriad# sysctl -d net.link.ether.inet.log_arp_movements net.link.ether.inet.log_arp_movements: log arp replies from MACs different than the one in the cache I get these messages about 10/day on an interface that's connected to a cable modem network (Blueyonder in the UK). I've just set this sysctl to see if it stops these messages for me. Andrew ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: arp problem in /var/log/messages
At 07:14 AM 01/18/04, you wrote: hi all, i got flooded by these msgs like 1000+ lines, any idea? my kernel is dated Nov-30 FreeBSD 4.9-stable # tail -f /var/log/messages Jan 18 19:43:23 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 to 00:50:0f:4f:c0:00 on rl0 Jan 18 19:45:06 xb /kernel: arp: 202.79.180.1 moved from 00:50:0f:4f:c0:00 to 00:04:5a:49:eb:74 on rl0 Jan 18 19:45:18 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 to 00:50:0f:4f:c0:00 on rl0 Jan 18 19:45:41 xb /kernel: arp: 202.79.180.1 moved from 00:50:0f:4f:c0:00 to 00:04:5a:49:eb:74 on rl0 Jan 18 19:45:45 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 to 00:50:0f:4f:c0:00 on rl You have a Linksys and Cisco device fighting over a IP address either they both think they own the address or one or maybe both are proxy arping for the address. The fields 00:04:5a:49:eb:74 & 00:50:0f:4f:c0:00 are the ethernet address of the Linksys and Cisco devices respectively. Regards, Lyle Evans [EMAIL PROTECTED] rackmount brackets for many networking and ISP equipment chassises http://www.rackears.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: arp problem in /var/log/messages
On Sun, 18 Jan 2004 20:14:29 +0800 "Spades" <[EMAIL PROTECTED]> wrote: > hi all, i got flooded by these msgs like 1000+ lines, any idea? > my kernel is dated Nov-30 FreeBSD 4.9-stable > > # tail -f /var/log/messages > Jan 18 19:43:23 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 > to 00:50:0f:4f:c0:00 on rl0 > Jan 18 19:45:06 xb /kernel: arp: 202.79.180.1 moved from 00:50:0f:4f:c0:00 > to 00:04:5a:49:eb:74 on rl0 > Jan 18 19:45:18 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 > to 00:50:0f:4f:c0:00 on rl0 > Jan 18 19:45:41 xb /kernel: arp: 202.79.180.1 moved from 00:50:0f:4f:c0:00 > to 00:04:5a:49:eb:74 on rl0 > Jan 18 19:45:45 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 > to 00:50:0f:4f:c0:00 on rl0 > > thanks and regards, > > John > > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "[EMAIL PROTECTED]" > # sysctl net.link.ether.inet.log_arp_wrong_iface=1 should mask the messages. horio shoichi ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: ARP Problem - Please Help
"Company 2210" <[EMAIL PROTECTED]> writes: > My problem is this (and it's driving me nuts as I can't see the > solution). I have two freebsd boxes acting as routers, the layout is like > this: > > > Clients (12.20.78.0/25) <->(eth0) ROUTER A (eth1)<===> (eth1) ROUTER > B (eth0) <> (12.20.65.69) Upstream ISP & Internet > > Router A Configuration: > > eth0: 12.20.78.1 Subnet 255.255.255.128 > eth1: 10.0.0.1 Subnet 255.255.255.0 > > Router B Configuration: > > eth0: 12.20.65.70 Subnet 255.255.255.252 > eth1: 10.0.0.2 Subnet 255.255.255.0 > > > The private IP's denote an IPSEC VPN connection (Wireless) between ROUTER A > & B, all the client PC's are on public IP's. Now, the VPN works perfectly, > encrypting the packets over the wireless link, however ROUTER A's eth0 > interface does not appear in the arp -a lookup: > > ? (10.0.0.1) at 00:05:5d:a6:15:78 on eth1 permanent [ethernet] > ? (10.0.0.2) at 00:c0:dd:ea:ac:5c on eth1 [ethernet] > ? (12.20.78.0) at ff:ff:ff:ff:ff:ff on eth0 permanent [ethernet] > ? (12.20.78.2) at 00:0c:cd:53:d9:f3 on eth0 [ethernet] > ? (12.20.78.42) at 00:9a:17:90:d3:b4 on eth0 [ethernet] > ? (12.20.78.52) at 00:2b:18:2e:22:21 on eth0 [ethernet] > ? (12.20.78.127) at ff:ff:ff:ff:ff:ff on eth0 permanent [ethernet] Those look like entries for all the local nets... > If I try and force the entry, I receive the following error: > > routera# arp -s 12.20.78.1 00:0c:5d:e6:16:75 > set: can only proxy for 12.20.78.1 Router B shouldn't need that, because it isn't on that link, and Router A shouldn't need it because it *is* 12.20.78.1. What are you trying to do? > The big problem this is causing is that clients cannot ping the gateway, and > it responds to no requests (i.e I can't ssh into it), but it still forwards > packets perfectly. Basically it's like 12.20.78.1 was invisible. The other > strange thing is, that if I ssh into ROUTER B and ping 12.20.78.1 I receive > replies: What host and gateway addresses are you referring to in the first sentence, and why are you surprised by the second? > routerb# ping 12.20.78.1 > PING 12.20.78.1 (12.20.78.1): 56 data bytes > 64 bytes from 12.20.78.1: icmp_seq=0 ttl=64 time=3.577 ms > 64 bytes from 12.20.78.1: icmp_seq=1 ttl=64 time=3.724 ms > 64 bytes from 12.20.78.1: icmp_seq=2 ttl=64 time=3.817 ms > ^C > --- 12.20.78.1 ping statistics --- > 3 packets transmitted, 3 packets received, 0% packet loss > round-trip min/avg/max/stddev = 3.577/3.706/3.817/0.099 ms > > > The output of ROUTER B's arp table is displayed below: > > ? (10.0.0.1) at 00:05:5d:a6:15:78 on eth1 [ethernet] > ? (10.0.0.2) at 00:c0:dd:ea:ac:5c on eth1 permanent [ethernet] > ? (12.20.65.69) at 00:d0:03:ba:bb:fc on eth0 [ethernet] > > > I am completely at a loss as to how to get around this problem. Any help or > advice would be really great as I've spend the past 3 days, and the floor is > littered with tufts of hair ;) Just incase this is any help, this is the > output from setkey -DP (For encrypting the packets across the 10.0.0.x link) > on each router: > > ROUTER A: > > 0.0.0.0/0[any] 12.20.78.0/25[any] any > in ipsec > esp/tunnel/10.0.0.2-10.0.0.1/require > spid=2 seq=1 pid=778 > refcnt=1 > 12.20.78.0/25[any] 0.0.0.0/0[any] any > out ipsec > esp/tunnel/10.0.0.1-10.0.0.2/require > spid=1 seq=0 pid=778 > refcnt=1 > > ROUTER B: > > 12.20.78.0/25[any] 0.0.0.0/0[any] any > in ipsec > esp/tunnel/10.0.0.1-10.0.0.2/require > spid=8 seq=1 pid=24377 > refcnt=1 > 0.0.0.0/0[any] 12.20.78.0/25[any] any > out ipsec > esp/tunnel/10.0.0.2-10.0.0.1/require > spid=7 seq=0 pid=24377 > refcnt=1 I don't really get the "eth0" nomenclature, anyway; I've seen it on Linux, where the device type is abstracted behind a common name, but I don't know what it means in a FreeBSD setup... ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
