From owner-freebsd-current Thu Oct 18 3: 5:10 2001 Delivered-To: freebsd-current@freebsd.org Received: from polaris.we.lc.ehu.es (polaris.we.lc.ehu.es [158.227.6.43]) by hub.freebsd.org (Postfix) with ESMTP id 5DF4937B405; Thu, 18 Oct 2001 03:05:02 -0700 (PDT) Received: from v-ger.we.lc.ehu.es (v-ger [158.227.6.51]) by polaris.we.lc.ehu.es (8.11.6/8.11.6) with ESMTP id f9IA4uX20109; Thu, 18 Oct 2001 12:04:56 +0200 (MET DST) Received: (from jose@localhost) by v-ger.we.lc.ehu.es (8.11.6/8.11.6) id f9I9xTR01422; Thu, 18 Oct 2001 11:59:29 +0200 (CEST) (envelope-from jose) Date: Thu, 18 Oct 2001 11:59:29 +0200 From: "Jose M. Alcaide" To: Beech Rintoul Cc: current@FreeBSD.org, net@FreeBSD.org Subject: Re: arp: is using my IP address 0.0.0.0! ??!?!? Message-ID: <20011018115929.C921@v-ger.we.lc.ehu.es> References: <20011018065526.F3D4DC8@nebula.anchoragerescue.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20011018065526.F3D4DC8@nebula.anchoragerescue.org>; from akbeech@anchoragerescue.org on Wed, Oct 17, 2001 at 10:55:25PM -0800 X-Operating-System: FreeBSD 4.4-RELEASE Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Wed, Oct 17, 2001 at 10:55:25PM -0800, Beech Rintoul wrote: > On Wed, 17 Oct 2001, Jose M. Alcaide wrote: > > After rebuilding the kernel two days ago (Oct 15), I am getting lots of > > messages like these: > > > > arp: 00:30:65:de:99:32 is using my IP address 0.0.0.0! > > arp: 00:0a:27:b0:a7:06 is using my IP address 0.0.0.0! > > arp: 00:30:65:d1:2f:cc is using my IP address 0.0.0.0! > > arp: 00:30:65:e9:57:5e is using my IP address 0.0.0.0! > > > > and so on. > > > > Neither ifconfig(8) nor arp(8) show anything unusual. > > > > I'm having the exact same problem. I connect to a large subnet /12 and I'm > getting flooded with these. This just started about a week ago. I'm also not > using DHCP. Any way of blocking this short of turning off all kernel messages? I found something interesting: these messages are caused by ARP requests carrying 0.0.0.0 as the sender IP address. All of them come from Apple Macintosh (over 40 different machines). I am not sure whether 0.0.0.0 is a legal sender IP address in an ARP request; 0.0.0.0 means "this" host, so that I think that it is a valid address when the machine doing the ARP request does not know its IP address yet (though this sounds stupid). Anyway, the fact is that -CURRENT can flood the console and /var/log/messages if there are many Macintosh sending these ARP requests in a LAN (as it is our case). I think that there is no reason to printf these messages, since 0.0.0.0 is a valid IP address meaning "this" host. -- ****** Jose M. Alcaide // jose@we.lc.ehu.es // jmas@FreeBSD.org ****** ** "Beware of Programmers who carry screwdrivers" -- Leonard Brandwein ** To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message