From owner-freebsd-questions  Wed Jun  6 17: 9:21 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from kineo.bowdoin.edu (kineo.bowdoin.edu [139.140.14.35])
	by hub.freebsd.org (Postfix) with ESMTP id A482537B403
	for <questions@FreeBSD.ORG>; Wed,  6 Jun 2001 17:09:17 -0700 (PDT)
	(envelope-from mcowger@bowdoin.edu)
Received: from bowdoin.edu ([127.0.0.1]) by kineo.bowdoin.edu
          (Netscape Messaging Server 4.15) with ESMTP id GEJ9RG00.E8B;
          Wed, 6 Jun 2001 20:09:16 -0400 
From: "Matthew K. Cowger" <mcowger@bowdoin.edu>
To: pjklist@ekahuna.com
Cc: questions@FreeBSD.ORG
Message-ID: <17c59317ef57.17ef5717c593@bowdoin.edu>
Date: Wed, 06 Jun 2001 17:09:16 -0700
X-Mailer: Netscape Webmail
MIME-Version: 1.0
Content-Language: en
Subject: Re: "Unknown hardware address format"
X-Accept-Language: en
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

Philip, et. al.

I get these as well, somedays alot of them, some days not.  I am 
running in a mixed environment (5+ DEC Alphas, 20+ COmpaq NT Boxes, 
Dell Linux Boxes, and a couple macs), And these Unknown Hardware 
Address fromat messages endup in my logs on my BSD box all day long 
(old Compaq 266 w/ Intel EtherExpress PRo 10/100).  I'll be happy to 
sent any log output...it would be nice to get rid of these, or find out 
what machine is sending them.

.matt

----- Original Message -----
From: "Philip J. Koenig" <pjklist@ekahuna.com>
Date: Wednesday, June 6, 2001 5:04 pm
Subject: "Unknown hardware address format"

> I posted a similiar question to this list and the Security list on 
> 5/28 and didn't get any definitive replies.
> 
> Today I am seeing the same message, out of the blue, in my syslog 
> and 
> echoed to console (4.3-STABLE):
> 
>        io /kernel: arp: unknown hardware address format (0x0800)
> 
> I searched the mailing list archives to no avail, but ran across 
> some 
> stuff on altavista, apparently 0800 matches both IP and arp 
> protocol 
> numbers, here is apparently some kernel code that generates this 
> message (if_ether.c), from the URL below:
> 
>        http://minnie.tuhs.org/FreeBSD-
> srctree/newsrc/netinet/if_ether.c.html
> ----------------- Begin code snippet --------------------
> if (ntohs(ar->ar_hrd) != ARPHRD_ETHER
>    && ntohs(ar->ar_hrd) != ARPHRD_IEEE802) {
> log(LOG_ERR,
>    "arp: unknown hardware address format (0x%2D)\n",
>    (unsigned char *)&ar->ar_hrd, "");
> m_freem(m);
> continue;
> }
> --------------------- End code snippet ------------------
> 
> 
> I keep worrying it may be a security breach or something, or maybe 
> a 
> piece of failing network hardware.  I'd rather not join one of the 
> kernel lists just to ask this question, so if anyone is a 
> kernel/net 
> hacker or would like to forward it to one, i'd appreciate it..
> 
> Thx,
> 
> 
> Phil
> 
> 
> 
> --
> Philip J. Koenig                                       
> pjklist@ekahuna.comElectric Kahuna Systems -- Computers & 
> Communications for the New Millenium
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message