From owner-freebsd-questions Tue Apr 17 15:42:50 2001 Delivered-To: freebsd-questions@freebsd.org Received: from ns-exch05.jccc.net (ns-exch05.jccc.net [198.248.56.5]) by hub.freebsd.org (Postfix) with ESMTP id 6DE9337B423 for ; Tue, 17 Apr 2001 15:42:46 -0700 (PDT) (envelope-from ndunker@jccc.net) Received: by ns-exch05 with Internet Mail Service (5.5.2653.19) id ; Tue, 17 Apr 2001 17:40:24 -0500 Message-ID: From: Noah Dunker To: 'Trevin Chow' Cc: questions@FreeBSD.ORG Subject: RE: ARP message filling my logs Date: Tue, 17 Apr 2001 17:40:19 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain; charset="iso-8859-1" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I might be crazy here, but those logs look like something that arpwatch would generate. If you're running arpwatch, shut it down. If you're not running arpwatch, then you will need to play with syslog.conf. In general, FreeBSD ships with a very "noisy" syslog default configuration for a normal desktop user. I'd try to figure what syslog convention and level it's coming in as, and modify your syslog.conf accordigly. There's a LOT of juicy information in books and on the web about how to tune syslog. For a REALLY detailed dissection of the syslog.conf file, give chapter 8 of the book "Linux System Security" a read. It's a good book to have around, a lot of it applies to Linux AND many other OS's, but a lot of it's only useable in Linux, too. I don't know off the top of my head where you can get a good tutorial about syslog off the Web. Sorry. Noah Dunker Systems Analyst/Technician Johnson County Community College -----Original Message----- From: Trevin Chow [mailto:tmchow@sfu.ca] Sent: Tuesday, April 17, 2001 5:40 PM To: Noah Dunker Cc: questions@FreeBSD.ORG Subject: RE: ARP message filling my logs How can I ignore the messages? At 05:27 PM 4/17/2001 -0500, Noah Dunker wrote: >DHCP Addresses rotating between computers, or if you're using a product like >MetaIP that gives each USER an IP Address based on Username (instead of by >MAC address), this could easily be the cause. > >Noah Dunker >Systems Analyst/Technician >Johnson County Community College > >-----Original Message----- >From: Trevin Chow [mailto:tmchow@sfu.ca] >Sent: Tuesday, April 17, 2001 5:20 PM >To: questions@FreeBSD.ORG >Subject: ARP message filling my logs > > >Hi, > >I'm getting these messages from my ISP's 2 nameservers. The messages are >constantly flooding >my console terminal and I'd like the insanity to stop :) > >/kernel: arp: 209.53.0.1 moved from 40:00:d1:35:3c:fe to 00:00:0c:35:17:f0 >on fxp0 >/kernel: arp: 209.53.0.17 moved from 40:00:d1:35:3c:fe to 00:00:0c:35:17:f0 >on fxp0 >/kernel: arp: 209.53.0.17 moved from 00:00:0c:35:17:f0 to 40:00:d1:35:3c:fe >on fxp0 > >Why the heck would the MAC address keep changing? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message