From owner-freebsd-questions Mon Jul 19 18:58:57 1999 Delivered-To: freebsd-questions@freebsd.org Received: from cc942873-a.ewndsr1.nj.home.com (cc942873-a.ewndsr1.nj.home.com [24.2.89.207]) by hub.freebsd.org (Postfix) with ESMTP id 65CC515112 for ; Mon, 19 Jul 1999 18:58:54 -0700 (PDT) (envelope-from cjc@cc942873-a.ewndsr1.nj.home.com) Received: (from cjc@localhost) by cc942873-a.ewndsr1.nj.home.com (8.9.3/8.8.8) id VAA01321; Mon, 19 Jul 1999 21:59:55 -0400 (EDT) (envelope-from cjc) From: "Crist J. Clark" Message-Id: <199907200159.VAA01321@cc942873-a.ewndsr1.nj.home.com> Subject: Re: what is this arp message?? In-Reply-To: from Wayne Cuddy at "Jul 18, 99 10:48:41 pm" To: wayne@crb-web.com Date: Mon, 19 Jul 1999 21:59:55 -0400 (EDT) Cc: freebsd-questions@FreeBSD.ORG Reply-To: cjclark@home.com X-Mailer: ELM [version 2.4ME+ PL40 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Wayne Cuddy wrote, > Jul 18 21:57:51 wc2 /kernel.fw: arp: 00:60:3e:07:90:80 attempts to modify > permanent entry for 207.196.43.1 on ed0 > > > There doesn't appear to be anything wrong with network operation... Are these > serious errors/warnings? That depends. Looks like a machine somewhere thinks its interface with Ethernet address 00:60:3e:07:90:80 has an IP address of 207.196.43.1. However, your machine wc2 has a permanent entry in its ARP table for 207.196.43.1 that is different (lemme guess,207.196.43.1 is [one of] wc2's interface[s]). If all seems well and this is an innocent misconfiguration, the problem _might_ be serious. Other machines may be more confused and the machine erroniously claiming to own 207.196.43.1 is definiately confused. This should be fixed. If this is a malicious attack, i.e. someone is trying to masquerade as one of your machines, this could be serious and needs immediate investigation. -- Crist J. Clark cjclark@home.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message