From owner-freebsd-questions  Fri Dec 15 11:30:38 1995
Return-Path: owner-questions
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.3/8.7.3) id LAA12628
          for questions-outgoing; Fri, 15 Dec 1995 11:30:38 -0800 (PST)
Received: from kachina.jetcafe.org ([206.117.70.2])
          by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id LAA12623
          Fri, 15 Dec 1995 11:30:34 -0800 (PST)
Received: from [127.0.0.1] ([127.0.0.1]) by kachina.jetcafe.org (8.6.10/8.6.6) with SMTP id LAA09329; Fri, 15 Dec 1995 11:30:26 -0800
Message-Id: <199512151930.LAA09329@kachina.jetcafe.org>
To: bugs@freebsd.org, questions@freebsd.org
Subject: ARP problems?
Date: Fri, 15 Dec 1995 11:30:25 -0800
From: Dave Hayes <dave@kachina.jetcafe.org>
Sender: owner-questions@freebsd.org
Precedence: bulk

[I'm only on "hackers" and "security", so please reply to me
directly.]

Can someone tell me why this happens:

# tcpdump -e -f -l -n broadcast or icmp or arp or rarp
...stuff..

<in another window>
# arp -s 206.170.75.90 0:0:c0:58:b9:c7 pub

<back in the tcpdump window>
00:01:10.865938 0:0:c0:58:b9:c7 ff:ff:ff:ff:ff:ff 0806 42: arp who-has 206.170.75.90 tell 206.170.75.90

Is this bogus, or a subtlety of the arp protocol I don't understand? 

BTW, the machine does not properly respond to arp requests, but
I can't see the router to tell if there's something bogonic in the
arp cache. 
------
         >>> Dave Hayes - Altadena CA, USA - dave@jetcafe.org <<<

Treat people as if they are what they ought to be, and you help them to 
become what they are capable of being.