Re: arp problem in /var/log/messages
From: "Jack L. Stone" <[EMAIL PROTECTED]> > BTW, the Windows machines never did resolve the new NIC MAC after several > hours, but the FBSD's did within about an hour. Lesson learned. You can use "arp -d *" to delete the arp cache on windows. Kenneth Sundby ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: arp problem in /var/log/messages
Bjoern A. Zeeb wrote: On Tue, 20 Jan 2004, Mark wrote: But what causes them ? I get them too. I believe CISCO routers do this. I had a reference once but lost it. In my case the routers are somewhere on my ISPs network. --Alex ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: arp problem in /var/log/messages
On Tue, 20 Jan 2004, Mark wrote: > But what causes them ? I get them too. one host, two NICs same braodcast domain ? -- Bjoern A. Zeeb bzeeb at Zabbadoz dot NeT 56 69 73 69 74 http://www.zabbadoz.net/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: arp problem in /var/log/messages
On Tue, 20 Jan 2004, Mark wrote: > But what causes them ? I get them too. most likely two machines on your LAN who're using the same IP address. note that some implementations of redundancy will do the same. track the machine with the two ethernet addresses. Regards, /\_/\ "All dogs go to heaven." [EMAIL PROTECTED](0 0)http://www.alphaque.com/ +==oOO--(_)--OOo==+ | for a in past present future; do| | for b in clients employers associates relatives neighbours pets; do | | echo "The opinions here in no way reflect the opinions of my $a $b." | | done; done | +=+ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: arp problem in /var/log/messages
Probably some device on your network is using the same ip and they are fighting for it. I had this happen with Zeus load balancer and another system using the same ip. - Original Message - From: "Mark" <[EMAIL PROTECTED]> To: "horio shoichi" <[EMAIL PROTECTED]>; "Spades" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Wednesday, January 21, 2004 5:22 AM Subject: Re: arp problem in /var/log/messages > But what causes them ? I get them too. > > > > On Sun, 18 Jan 2004 20:14:29 +0800 > > "Spades" <[EMAIL PROTECTED]> wrote: > > > hi all, i got flooded by these msgs like 1000+ lines, any idea? > > > my kernel is dated Nov-30 FreeBSD 4.9-stable > > > > > > # tail -f /var/log/messages > > > Jan 18 19:43:23 xb /kernel: arp: 202.79.180.1 moved from > 00:04:5a:49:eb:74 > > > to 00:50:0f:4f:c0:00 on rl0 > > > Jan 18 19:45:06 xb /kernel: arp: 202.79.180.1 moved from > 00:50:0f:4f:c0:00 > > > to 00:04:5a:49:eb:74 on rl0 > > > Jan 18 19:45:18 xb /kernel: arp: 202.79.180.1 moved from > 00:04:5a:49:eb:74 > > > to 00:50:0f:4f:c0:00 on rl0 > > > Jan 18 19:45:41 xb /kernel: arp: 202.79.180.1 moved from > 00:50:0f:4f:c0:00 > > > to 00:04:5a:49:eb:74 on rl0 > > > Jan 18 19:45:45 xb /kernel: arp: 202.79.180.1 moved from > 00:04:5a:49:eb:74 > > > to 00:50:0f:4f:c0:00 on rl0 > > > > > > thanks and regards, > > > > > > John > > > > > > ___ > > > [EMAIL PROTECTED] mailing list > > > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > > > To unsubscribe, send any mail to > "[EMAIL PROTECTED]" > > > > > > > # sysctl net.link.ether.inet.log_arp_wrong_iface=1 > > > > should mask the messages. > > > > > > > > horio shoichi > > > > ___ > > [EMAIL PROTECTED] mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > > To unsubscribe, send any mail to > "[EMAIL PROTECTED]" > > > > > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "[EMAIL PROTECTED]" > ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: arp problem in /var/log/messages
But what causes them ? I get them too. > On Sun, 18 Jan 2004 20:14:29 +0800 > "Spades" <[EMAIL PROTECTED]> wrote: > > hi all, i got flooded by these msgs like 1000+ lines, any idea? > > my kernel is dated Nov-30 FreeBSD 4.9-stable > > > > # tail -f /var/log/messages > > Jan 18 19:43:23 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 > > to 00:50:0f:4f:c0:00 on rl0 > > Jan 18 19:45:06 xb /kernel: arp: 202.79.180.1 moved from 00:50:0f:4f:c0:00 > > to 00:04:5a:49:eb:74 on rl0 > > Jan 18 19:45:18 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 > > to 00:50:0f:4f:c0:00 on rl0 > > Jan 18 19:45:41 xb /kernel: arp: 202.79.180.1 moved from 00:50:0f:4f:c0:00 > > to 00:04:5a:49:eb:74 on rl0 > > Jan 18 19:45:45 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 > > to 00:50:0f:4f:c0:00 on rl0 > > > > thanks and regards, > > > > John > > > > ___ > > [EMAIL PROTECTED] mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > > To unsubscribe, send any mail to "[EMAIL PROTECTED]" > > > > # sysctl net.link.ether.inet.log_arp_wrong_iface=1 > > should mask the messages. > > > > horio shoichi > > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "[EMAIL PROTECTED]" > ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: arp problem in /var/log/messages
horio shoichi wrote: hi all, i got flooded by these msgs like 1000+ lines, any idea? my kernel is dated Nov-30 FreeBSD 4.9-stable # tail -f /var/log/messages Jan 18 19:43:23 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 to 00:50:0f:4f:c0:00 on rl0 Jan 18 19:45:06 xb /kernel: arp: 202.79.180.1 moved from 00:50:0f:4f:c0:00 to 00:04:5a:49:eb:74 on rl0 Jan 18 19:45:18 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 to 00:50:0f:4f:c0:00 on rl0 Jan 18 19:45:41 xb /kernel: arp: 202.79.180.1 moved from 00:50:0f:4f:c0:00 to 00:04:5a:49:eb:74 on rl0 Jan 18 19:45:45 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 to 00:50:0f:4f:c0:00 on rl0 # sysctl net.link.ether.inet.log_arp_wrong_iface=1 should mask the messages. Shouldn't that be net.link.ether.inet.log_arp_movements ? myriad# sysctl -d net.link.ether.inet.log_arp_movements net.link.ether.inet.log_arp_movements: log arp replies from MACs different than the one in the cache I get these messages about 10/day on an interface that's connected to a cable modem network (Blueyonder in the UK). I've just set this sysctl to see if it stops these messages for me. Andrew ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: arp problem in /var/log/messages
At 07:14 AM 01/18/04, you wrote: hi all, i got flooded by these msgs like 1000+ lines, any idea? my kernel is dated Nov-30 FreeBSD 4.9-stable # tail -f /var/log/messages Jan 18 19:43:23 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 to 00:50:0f:4f:c0:00 on rl0 Jan 18 19:45:06 xb /kernel: arp: 202.79.180.1 moved from 00:50:0f:4f:c0:00 to 00:04:5a:49:eb:74 on rl0 Jan 18 19:45:18 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 to 00:50:0f:4f:c0:00 on rl0 Jan 18 19:45:41 xb /kernel: arp: 202.79.180.1 moved from 00:50:0f:4f:c0:00 to 00:04:5a:49:eb:74 on rl0 Jan 18 19:45:45 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 to 00:50:0f:4f:c0:00 on rl You have a Linksys and Cisco device fighting over a IP address either they both think they own the address or one or maybe both are proxy arping for the address. The fields 00:04:5a:49:eb:74 & 00:50:0f:4f:c0:00 are the ethernet address of the Linksys and Cisco devices respectively. Regards, Lyle Evans [EMAIL PROTECTED] rackmount brackets for many networking and ISP equipment chassises http://www.rackears.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: arp problem in /var/log/messages
On Sun, 18 Jan 2004 20:14:29 +0800 "Spades" <[EMAIL PROTECTED]> wrote: > hi all, i got flooded by these msgs like 1000+ lines, any idea? > my kernel is dated Nov-30 FreeBSD 4.9-stable > > # tail -f /var/log/messages > Jan 18 19:43:23 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 > to 00:50:0f:4f:c0:00 on rl0 > Jan 18 19:45:06 xb /kernel: arp: 202.79.180.1 moved from 00:50:0f:4f:c0:00 > to 00:04:5a:49:eb:74 on rl0 > Jan 18 19:45:18 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 > to 00:50:0f:4f:c0:00 on rl0 > Jan 18 19:45:41 xb /kernel: arp: 202.79.180.1 moved from 00:50:0f:4f:c0:00 > to 00:04:5a:49:eb:74 on rl0 > Jan 18 19:45:45 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74 > to 00:50:0f:4f:c0:00 on rl0 > > thanks and regards, > > John > > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "[EMAIL PROTECTED]" > # sysctl net.link.ether.inet.log_arp_wrong_iface=1 should mask the messages. horio shoichi ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"