From owner-freebsd-newbies Mon Jul 1 7: 7:15 2002 Delivered-To: freebsd-newbies@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9A38A37B407 for ; Mon, 1 Jul 2002 07:07:08 -0700 (PDT) Received: from seven.slakin.net (adsl-67-112-126-134.dsl.pltn13.pacbell.net [67.112.126.134]) by mx1.FreeBSD.org (Postfix) with ESMTP id 132CB43E09 for ; Mon, 1 Jul 2002 07:07:08 -0700 (PDT) (envelope-from drama@slakin.net) Received: from localhost (localhost.slakin.net [127.0.0.1]) by seven.slakin.net (Postfix) with ESMTP id 4CCE67CC; Mon, 1 Jul 2002 07:07:09 -0700 (PDT) Date: Mon, 1 Jul 2002 07:07:09 -0700 (PDT) From: Matt Snow To: freebsd Cc: freebsd-newbies@freebsd.org Subject: Re: your mail In-Reply-To: <001c01c22107$a6f16200$02a8a8c0@mdd> Message-ID: <20020701070427.D60705-100000@seven.slakin.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-newbies@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org It sounds like your redhat server is doing some funky stuff. what app's are running on that redhat box? Could it have gotten rooted? Something is making the MAC address [abnormally] change which never happens on my network unless I'm running ettercap. * * * * * * * * Matt Snow (@) drama@slakin.net (w) http://slakin.net. On Mon, 1 Jul 2002, freebsd wrote: > Hello, > I put a linux redhat machine on my network. > since then my freebsd box has been spewing these errors to me. > THe mac addys in question are the two nics in the redhat box. The first mac > listed is the nic with the actual ip in question. > The second mac is a private ip on the second nic. > > I have rebooted both machines thinking that might help but alas no. > Why ? and how do I fix it ? > thanks > error: > Unusual System Events > =-=-=-=-=-=-=-=-=-=-= > Jul 1 09:03:40 webserver /kernel: arp: 208.62.145.44 moved from > 00:20:78:07:37:ec to 00:c0:f0:10:84:0c on dc0 > Jul 1 09:03:40 webserver /kernel: arp: 208.62.145.44 moved from > 00:20:78:07:37:ec to 00:c0:f0:10:84:0c on dc0 > Jul 1 09:03:40 webserver /kernel: arp: 208.62.145.44 moved from > 00:c0:f0:10:84:0c to 00:20:78:07:37:ec on dc0 > Jul 1 09:03:40 webserver /kernel: arp: 208.62.145.44 moved from > 00:c0:f0:10:84:0c to 00:20:78:07:37:ec on dc0 > Jul 1 09:03:40 webserver /kernel: Jul 1 09:03:40 webserver /kernel: arp: > 208.62.145.44 moved from 00:20:78:07:37:ec to 00:c0:f0:10:84:0c on dc0 > Jul 1 09:03:40 webserver /kernel: Jul 1 09:03:40 webserver /kernel: arp: > 208.62.145.44 moved from 00:c0:f0:10:84:0c to 00:20:78:07:37:ec on dc0 > Jul 1 09:23:40 webserver /kernel: arp: 208.62.145.44 moved from > 00:20:78:07:37:ec to 00:c0:f0:10:84:0c on dc0 > Jul 1 09:23:40 webserver /kernel: arp: 208.62.145.44 moved from > 00:20:78:07:37:ec to 00:c0:f0:10:84:0c on dc0 > Jul 1 09:23:40 webserver /kernel: arp: 208.62.145.44 moved from > 00:c0:f0:10:84:0c to 00:20:78:07:37:ec on dc0 > Jul 1 09:23:40 webserver /kernel: arp: 208.62.145.44 moved from > 00:c0:f0:10:84:0c to 00:20:78:07:37:ec on dc0 > Jul 1 09:23:40 webserver /kernel: Jul 1 09:23:40 webserver /kernel: arp: > 208.62.145.44 moved from 00:20:78:07:37:ec to 00:c0:f0:10:84:0c on dc0 > Jul 1 09:23:40 webserver /kernel: Jul 1 09:23:40 webserver /kernel: arp: > 208.62.145.44 moved from 00:c0:f0:10:84:0c to 00:20:78:07:37:ec on dc0 > Jul 1 09:43:40 webserver /kernel: arp: 208.62.145.44 moved from > 00:20:78:07:37:ec to 00:c0:f0:10:84:0c on dc0 > Jul 1 09:43:40 webserver /kernel: arp: 208.62.145.44 moved from > 00:20:78:07:37:ec to 00:c0:f0:10:84:0c on dc0 > Jul 1 09:43:40 webserver /kernel: arp: 208.62.145.44 moved from > 00:c0:f0:10:84:0c to 00:20:78:07:37:ec on dc0 > Jul 1 09:43:40 webserver /kernel: arp: 208.62.145.44 moved from > 00:c0:f0:10:84:0c to 00:20:78:07:37:ec on dc0 > Jul 1 09:43:41 webserver /kernel: Jul 1 09:43:40 webserver /kernel: arp: > 208.62.145.44 moved from 00:20:78:07:37:ec to 00:c0:f0:10:84:0c on dc0 > Jul 1 09:43:41 webserver /kernel: Jul 1 09:43:40 webserver /kernel: arp: > 208.62.145.44 moved from 00:c0:f0:10:84:0c to 00:20:78:07:37:ec on dc0 > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-newbies" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-newbies" in the body of the message