Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 3 Apr 2009 20:32:31 -0400
From:      Tom Ierna <tom@shockergroup.com>
To:        Anuj Singh <anujhere@gmail.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: mac arp moved from-to DOS?
Message-ID:  <2270680C-DB97-4291-95F0-73FFE436B636@shockergroup.com>
In-Reply-To: <3120c9e30904031611l668e27f6vaf5ff6be15510f47@mail.gmail.com>
References:  <3120c9e30904031611l668e27f6vaf5ff6be15510f47@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Apr 3, 2009, at 7:11 PM, Anuj Singh wrote:
> 4 03:23:19 fbsd7 kernel: arp: 10.139.7.15 moved from 00:22:19:ae:ea:0d
> to 00:22:19:ae:ea:0f on age0
> Apr  4 03:23:19 fbsd7 kernel: arp: 10.139.7.15 moved from
> 00:22:19:ae:ea:0f to 00:22:19:ae:ea:0d on age0
>
> 10.139.7.15 is some windows machine...


Does this Windows machine have two Ethernet cards plugged into the  
same network?

It looks like your FreeBSD machine is seeing that IP address switch  
between two MAC addresses.

This can be indicative of a network loop between the interfaces on the  
machine with that IP address, or a DHCP client fight.

I've also seen this (harmlessly) manifest with certain FreeBSD  
firewalls in bridged mode.

-Tom




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?2270680C-DB97-4291-95F0-73FFE436B636>