From owner-freebsd-questions@FreeBSD.ORG  Thu May 15 09:12:00 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 0F3AC106567F
	for <freebsd-questions@freebsd.org>;
	Thu, 15 May 2008 09:12:00 +0000 (UTC)
	(envelope-from solskogen@carebears.mine.nu)
Received: from spankme.voop.as (spankme.voop.as [62.97.243.75])
	by mx1.freebsd.org (Postfix) with ESMTP id 85CF38FC15
	for <freebsd-questions@freebsd.org>;
	Thu, 15 May 2008 09:11:59 +0000 (UTC)
	(envelope-from solskogen@carebears.mine.nu)
Received: from tenderheart.bgo.internal.umoecom.net ([192.168.10.88])
	(authenticated bits=0)
	by spankme.voop.as (8.14.1/8.14.1) with ESMTP id m4F9D4gO013149
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Thu, 15 May 2008 11:13:05 +0200 (CEST)
Message-ID: <482BFE5C.3070305@carebears.mine.nu>
Date: Thu, 15 May 2008 11:11:56 +0200
From: Christer Solskogen <solskogen@carebears.mine.nu>
User-Agent: Thunderbird 2.0.0.14 (Macintosh/20080421)
MIME-Version: 1.0
To: Christian Walther <cptsalek@gmail.com>
References: <g07lip$736$1@ger.gmane.org>	
	<6.0.0.22.2.20080512153543.02665c88@mail.computinginnovations.com>	
	<g0aa89$q0p$1@ger.gmane.org>	
	<6.0.0.22.2.20080512163401.026387f8@mail.computinginnovations.com>	
	<g0ei1m$r0a$1@ger.gmane.org>	
	<6.0.0.22.2.20080514131710.025269f0@mail.computinginnovations.com>	
	<g0fms3$8qs$1@ger.gmane.org> <482B6875.6070005@radel.com>	
	<482B6F21.2040602@radel.com> <482BE2BA.6050105@carebears.mine.nu>
	<14989d6e0805150116v449d34a7wee1f438e2e22333c@mail.gmail.com>
In-Reply-To: <14989d6e0805150116v449d34a7wee1f438e2e22333c@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Scanned-By: MIMEDefang 2.62 on 62.97.243.75
X-Greylist: Sender succeeded SMTP AUTH authentication, not delayed by
	milter-greylist-3.0 (spankme.voop.as [62.97.243.75]);
	Thu, 15 May 2008 11:13:06 +0200 (CEST)
Cc: freebsd-questions@freebsd.org
Subject: Re: arplookup 0.0.0.0 failed: host is not on local network
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 15 May 2008 09:12:00 -0000

Christian Walther wrote:

> I don't want to point you into the wrong direction, but is it possible
> that this arp entry is actually a sign of an ARP spoofing attempt?
> http://en.wikipedia.org/wiki/ARP_spoofing
> 

I suspect that, but I just want to know if might be something else.

> Do you run a wireless network?

Yes I do. And that means that I will also try to be even more pedantic 
in the security on that box.

-- 
chs