From owner-freebsd-questions Sun Dec 1 12:35:21 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B15A237B401 for ; Sun, 1 Dec 2002 12:35:19 -0800 (PST) Received: from post-20.mail.nl.demon.net (post-20.mail.nl.demon.net [194.159.73.1]) by mx1.FreeBSD.org (Postfix) with ESMTP id E696643E88 for ; Sun, 1 Dec 2002 12:35:18 -0800 (PST) (envelope-from cls@raggedclown.net) Received: from [212.238.197.102] (helo=mailhost.raggedclown.net) by post-20.mail.nl.demon.net with esmtp (Exim 3.36 #1) id 18Iao9-0007Cg-00 for FreeBSD-questions@FreeBSD.ORG; Sun, 01 Dec 2002 20:35:18 +0000 Received: from localhost (localhost [127.0.0.1]) by mailhost.raggedclown.net (Ragged Clown Mail Gateway [dawn]) with ESMTP id 7CCAACD8 for ; Sun, 1 Dec 2002 21:35:16 +0100 (CET) Received: from willow.raggedclown.net (willow.raggedclown.intra [192.168.1.10]) by mailhost.raggedclown.net (Ragged Clown Mail Gateway [dawn]) with ESMTP id 27E8BC76 for ; Sun, 1 Dec 2002 21:35:05 +0100 (CET) Received: by willow.raggedclown.net (Ragged Clown Host [willow], from userid 1009) id 117F622596; Sun, 1 Dec 2002 21:35:06 +0100 (CET) Date: Sun, 1 Dec 2002 21:35:06 +0100 From: Cliff Sarginson To: FreeBSD Questions Subject: Re: interpretation of arp output Message-ID: <20021201203506.GA1424@raggedclown.net> References: <20021129054715.GA869@raggedclown.net> <20021129092555.GA64345@happy-idiot-talk.infracaninophi> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20021129092555.GA64345@happy-idiot-talk.infracaninophi> User-Agent: Mutt/1.5.1i X-Virus-Scanned: by AMaViS 0.3.12pre8 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Fri, Nov 29, 2002 at 09:25:55AM +0000, Matthew Seaman wrote: > On Fri, Nov 29, 2002 at 06:47:15AM +0100, Cliff Sarginson wrote: > > An arp -a gives the following line (amongst many happy bunnies) > > > > angelus.raggedclown.intra (192.168.1.50) at 00:a0:cc:d1:fb:88 on rl0 > > [ethernet] > > ? (192.168.1.255) at ff:ff:ff:ff:ff:ff on rl0 permanent [ethernet] > > That's quite normal. Some process is sending out packets to your > network broadcast address. You can investigate what with tcpdump: > > tcpdump -i rl0 ip broadcast > tcpdump -i rl0 ether broadcast > > > Can someone explain this to me .. the line with the "?" obviously. > > Whether it is relevant or not the line above represents a Windows > > XP system that does not get run very often (which means it may always > > be there, but I have never noticed it). > > No: the entries in the arp table are just ordered by IP number. > The machine 'angelus' just happens to be the next highest IP number > active on your network. > > The '?' just means that the system can't resolve that IP number into a > hostname. You can add entries for 192.168.1.255 to your /etc/hosts or > your DNS so that arp will have something to print out if you want. > Ok, thanks, I think it was the "?" that made me ask. Question marks make me nervous :) -- Regards Cliff Sarginson The Netherlands [ This mail has been checked as virus-free ] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message