From owner-freebsd-questions Wed Apr 3 3:58:31 2002 Delivered-To: freebsd-questions@freebsd.org Received: from buffnet4.buffnet.net (buffnet4.buffnet.net [205.246.19.13]) by hub.freebsd.org (Postfix) with ESMTP id 9875F37B420 for ; Wed, 3 Apr 2002 03:58:25 -0800 (PST) Received: from buffnet11.buffnet.net (buffnet11.buffnet.net [205.246.19.55]) by buffnet4.buffnet.net (8.9.3/8.8.7) with ESMTP id GAA12484; Wed, 3 Apr 2002 06:58:37 -0500 (EST) (envelope-from shovey@buffnet.net) Date: Wed, 3 Apr 2002 06:58:11 -0500 (EST) From: Stephen Hovey To: Paul Everlund Cc: Darren , fbsd-questions Subject: Re: cron security warning In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG > > > Could someone help me interpret this or point me to the appropriate source > > for more information? > > > > My nightly cron security check sent the following warning to me: > > > > kernel log messages: > > > arp: 192.168.1.1 moved from 00:50:ab:b1:6d:53 to 00:04:5a:d5:28:5b on ed0 > > > Apr 1 22:58:27 fbsd /kernel: arp: 192.168.1.1 moved from > > 00:50:ab:b1:6d:53 to 00:04:5a:d5:28:5b on ed0 > > Have you exchanged any network cards in your computer? Ive had this show up when a hub went flunky, or 1 router choked, so another acted as default - it means that an IP address that was associated with 1 mac address (ethernet interface's hardware address) was suddenly being advertised by another one. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message