From owner-freebsd-questions@FreeBSD.ORG Fri Jun 13 08:36:48 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B2A1737B401 for ; Fri, 13 Jun 2003 08:36:48 -0700 (PDT) Received: from pa-plum1b-166.pit.adelphia.net (pa-plum1b-217.pit.adelphia.net [24.53.161.217]) by mx1.FreeBSD.org (Postfix) with ESMTP id E053243FAF for ; Fri, 13 Jun 2003 08:36:47 -0700 (PDT) (envelope-from wmoran@potentialtech.com) Received: from potentialtech.com (working [172.16.0.95]) h5DFajOg002906; Fri, 13 Jun 2003 11:36:46 -0400 (EDT) (envelope-from wmoran@potentialtech.com) Message-ID: <3EE9EF8D.4070405@potentialtech.com> Date: Fri, 13 Jun 2003 11:36:45 -0400 From: Bill Moran User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.3) Gecko/20030429 X-Accept-Language: en-us, en MIME-Version: 1.0 To: ODHIAMBO Washington References: <20030613152226.GA91843@ns2.wananchi.com> In-Reply-To: <20030613152226.GA91843@ns2.wananchi.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: FBSD-Q Subject: Re: arp messages: Why is this happening? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Jun 2003 15:36:49 -0000 ODHIAMBO Washington wrote: > My log files (and console) fill up with these messages. > >>arp: 62.8.64.172 moved from 00:c0:05:11:01:f1 to 00:c0:05:10:01:f1 on bge1 >>arp: 62.8.64.201 moved from 00:c0:05:10:01:f1 to 00:c0:05:11:01:f1 on bge1 >>arp: 62.8.64.201 moved from 00:c0:05:11:01:f1 to 00:c0:05:10:01:f1 on bge1 >>arp: 62.8.64.145 moved from 00:c0:05:11:01:f1 to 00:c0:05:10:01:f1 on bge1 >>arp: 62.8.64.212 moved from 00:c0:05:11:01:f1 to 00:c0:05:10:01:f1 on bge1 >>arp: 62.8.64.188 moved from 00:c0:05:11:01:f1 to 00:c0:05:10:01:f1 on bge1 Could be that you're on a DHCP network and addresses are moving around a lot. I'm on Adelphia cable internet, and I see these messages off and on. Especially after network problems, there'll be a long list of them. Occassionally, I'll see one MAC address that is generating a lot of these messages ... I assume it's some broken Windows machine that can't figure out what IP to use. There is a sysctl that will turn off reporting of this: net.link.ether.inet.log_arp_movements Set it to 0 to stop the logging. -- Bill Moran Potential Technologies http://www.potentialtech.com