From owner-freebsd-questions@FreeBSD.ORG  Wed Jul  9 07:17:05 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id E5CA837B401
	for <questions@FreeBSD.ORG>; Wed,  9 Jul 2003 07:17:05 -0700 (PDT)
Received: from smtp-out6.blueyonder.co.uk (smtp-out6.blueyonder.co.uk
	[195.188.213.9])
	by mx1.FreeBSD.org (Postfix) with ESMTP id A7F4443F85
	for <questions@FreeBSD.ORG>; Wed,  9 Jul 2003 07:17:04 -0700 (PDT)
	(envelope-from jfm@blueyonder.co.uk)
Received: from lexx ([82.37.145.193]) by smtp-out6.blueyonder.co.uk with
	Microsoft SMTPSVC(5.0.2195.5329);	 Wed, 9 Jul 2003 15:17:03 +0100
From: John Murphy <jfm@blueyonder.co.uk>
To: Fuzzy <fuzzy@pooh.ASARian.org>
Date: Wed, 09 Jul 2003 15:17:02 +0100
Message-ID: <pp8ogvgh3r4l2gfj3gtju23u8p1vtlj88d@4ax.com>
References: <Pine.BSF.4.44.0307090916200.20779-100000@pooh.ASARian.org>
In-Reply-To: <Pine.BSF.4.44.0307090916200.20779-100000@pooh.ASARian.org>
X-Mailer: Forte Agent 1.9/32.560
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
X-OriginalArrivalTime: 09 Jul 2003 14:17:03.0219 (UTC)
	FILETIME=[C4DE8430:01C34624]
cc: questions@FreeBSD.ORG
Subject: Re: pooh.ASARian.org security run output (lots of wrong arp
	messages)
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: jfm@blueyonder.co.uk
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 09 Jul 2003 14:17:06 -0000

=46uzzy <fuzzy@pooh.ASARian.org> wrote:
>
>Is there any way to convince the kernel not to log these
>incorrect arp messages?
>
>currently we have...
>net.link.ether.inet.log_arp_wrong_iface: 1
>
>Is there a different sysctl or variable for rc.conf
>to stop it from logging incorrect information?

Indeed there is but only in 5.0 or greater I believe.  It's called:

net.link.ether.inet.log_arp_movements

--=20
HTH
John.