From owner-freebsd-security Sat Oct 12 21:39:52 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1EFF437B401 for ; Sat, 12 Oct 2002 21:39:50 -0700 (PDT) Received: from dsl-64-128-185-9.telocity.com (dsl-64-128-185-9.telocity.com [64.128.185.9]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5C6A043EB3 for ; Sat, 12 Oct 2002 21:39:49 -0700 (PDT) (envelope-from mjoyner2@hq.dyns.cx) Received: (from root@localhost) by dsl-64-128-185-9.telocity.com (8.12.6/8.11.5) id g9D4dkTg004597 for freebsd-security@freebsd.org; Sun, 13 Oct 2002 00:39:46 -0400 (EDT) (envelope-from mjoyner2@hq.dyns.cx) Received: from ip-24.internal (ip-34.internal [192.168.2.34]) by hq.dyns.cx (8.12.6/8.11.5av) with ESMTP id g9D4da5u004584 for ; Sun, 13 Oct 2002 00:39:36 -0400 (EDT) (envelope-from mjoyner2@hq.dyns.cx) Received: from hq.dyns.cx (localhost [127.0.0.1]) by ip-24.internal (8.12.6/8.12.6) with ESMTP id g9D4dcrG008354 for ; Sun, 13 Oct 2002 00:39:38 -0400 (EDT) (envelope-from mjoyner2@hq.dyns.cx) Message-ID: <3DA8F90A.7070101@hq.dyns.cx> Date: Sun, 13 Oct 2002 00:39:38 -0400 From: wolf User-Agent: Mozilla/5.0 (X11; U; Linux i386; en-US; rv:0.9.4.1) Gecko/20020508 Netscape6/6.2.3 X-Accept-Language: en-us MIME-Version: 1.0 Cc: FreeBSD Security Subject: Re: Kernel log message References: <20021013041740.GA39841@cowbert.2y.net> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: by AMaViS perl-11 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org >Could someone explain to me what the following log message means: > >disco.wwallace.net kernel log messages: > >arp: 192.168.100.2 moved from 00:20:78:0d:5a:7f to 00:00:78:0d:5a:7f on > >de0 > >Oct 5 08:03:57 disco /kernel: arp: 192.168.100.2 moved from > >00:20:78:0d:5a:7f to 00:00:78:0d:5a:7f on de0 > >The machine in question (192.168.100.2) is a Windows 2000 machine that has >had the same NIC for years. Also, only one of the digits in the MAC >address seems to have changed. What could cause this? > 1) The NIC card could be dieing. "same NIC for years" 2) Transmission error of some sort on you LAN 3) Problem w/ a packet switch. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message