Re: arp problem in /var/log/messages

From: Andrew Boothman (andrew_at_cream.org)
Date: 01/18/04

  • Next message: Patrick Muldoon: "Re: arp problem in /var/log/messages" 
    Date: Sun, 18 Jan 2004 20:56:23 +0000
To: horio shoichi <bugsgrief@bugsgrief.net>

    horio shoichi wrote:

    >>hi all, i got flooded by these msgs like 1000+ lines, any idea?
    >>my kernel is dated Nov-30 FreeBSD 4.9-stable
    >>
    >># tail -f /var/log/messages
    >>Jan 18 19:43:23 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74
    >>to 00:50:0f:4f:c0:00 on rl0
    >>Jan 18 19:45:06 xb /kernel: arp: 202.79.180.1 moved from 00:50:0f:4f:c0:00
    >>to 00:04:5a:49:eb:74 on rl0
    >>Jan 18 19:45:18 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74
    >>to 00:50:0f:4f:c0:00 on rl0
    >>Jan 18 19:45:41 xb /kernel: arp: 202.79.180.1 moved from 00:50:0f:4f:c0:00
    >>to 00:04:5a:49:eb:74 on rl0
    >>Jan 18 19:45:45 xb /kernel: arp: 202.79.180.1 moved from 00:04:5a:49:eb:74
    >>to 00:50:0f:4f:c0:00 on rl0
    >
    >
    > # sysctl net.link.ether.inet.log_arp_wrong_iface=1
    >
    > should mask the messages.

    Shouldn't that be net.link.ether.inet.log_arp_movements ?

    myriad# sysctl -d net.link.ether.inet.log_arp_movements
    net.link.ether.inet.log_arp_movements: log arp replies from MACs
    different than the one in the cache

    I get these messages about 10/day on an interface that's connected to a
    cable modem network (Blueyonder in the UK).

    I've just set this sysctl to see if it stops these messages for me.

    Andrew

    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

  • Next message: Patrick Muldoon: "Re: arp problem in /var/log/messages"