Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 18 Oct 2001 11:59:29 +0200
From:      "Jose M. Alcaide" <jose@we.lc.ehu.es>
To:        Beech Rintoul <akbeech@anchoragerescue.org>
Cc:        current@FreeBSD.org, net@FreeBSD.org
Subject:   Re: arp: <some ether addr> is using my IP address 0.0.0.0!  ??!?!?
Message-ID:  <20011018115929.C921@v-ger.we.lc.ehu.es>
In-Reply-To: <20011018065526.F3D4DC8@nebula.anchoragerescue.org>; from akbeech@anchoragerescue.org on Wed, Oct 17, 2001 at 10:55:25PM -0800
References:  <Pine.BSF.4.21.0110171211230.65297-100000@InterJet.elischer.org> <20011018065526.F3D4DC8@nebula.anchoragerescue.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Oct 17, 2001 at 10:55:25PM -0800, Beech Rintoul wrote:
> On Wed, 17 Oct 2001, Jose M. Alcaide wrote:
> > After rebuilding the kernel two days ago (Oct 15), I am getting lots of
> > messages like these:
> >
> > arp: 00:30:65:de:99:32 is using my IP address 0.0.0.0!
> > arp: 00:0a:27:b0:a7:06 is using my IP address 0.0.0.0!
> > arp: 00:30:65:d1:2f:cc is using my IP address 0.0.0.0!
> > arp: 00:30:65:e9:57:5e is using my IP address 0.0.0.0!
> >
> > and so on.
> >
> > Neither ifconfig(8) nor arp(8) show anything unusual.
> >
> 
> I'm having the exact same problem. I connect to a large subnet  /12 and I'm 
> getting flooded with these. This just started about a week ago. I'm also not 
> using DHCP. Any way of blocking this short of turning off all kernel messages?

I found something interesting: these messages are caused by ARP requests
carrying 0.0.0.0 as the sender IP address. All of them come from Apple
Macintosh (over 40 different machines). I am not sure whether 0.0.0.0 is a
legal sender IP address in an ARP request; 0.0.0.0 means "this" host, so
that I think that it is a valid address when the machine doing the ARP
request does not know its IP address yet (though this sounds stupid).

Anyway, the fact is that -CURRENT can flood the console and
/var/log/messages if there are many Macintosh sending these ARP requests
in a LAN (as it is our case). I think that there is no reason to printf
these messages, since 0.0.0.0 is a valid IP address meaning "this" host.

-- 
****** Jose M. Alcaide  //  jose@we.lc.ehu.es  //  jmas@FreeBSD.org ******
** "Beware of Programmers who carry screwdrivers" --  Leonard Brandwein **

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011018115929.C921>