Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 19 Feb 2012 22:39:13 -0800
From:      Kevin Oberman <kob6558@gmail.com>
To:        =?KOI8-R?B?68/O2MvP1yDl18fFzsnK?= <kes-kes@yandex.ru>
Cc:        freebsd-net@freebsd.org
Subject:   Re: freebsd sends arp queries for IP's in not it subnet
Message-ID:  <CAN6yY1spw3ko8Ct6gE637G9TzCAE_92YJ=w9M_VB1FjA==PQtg@mail.gmail.com>
In-Reply-To: <47346273.20120219153713@yandex.ru>
References:  <47346273.20120219153713@yandex.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
2012/2/19 =EB=CF=CE=D8=CB=CF=D7 =E5=D7=C7=C5=CE=C9=CA <kes-kes@yandex.ru>:
> # tcpdump -n -i vlan7
> tcpdump: verbose output suppressed, use -v or -vv for full protocol decod=
e
> listening on vlan7, link-type EN10MB (Ethernet), capture size 65535 bytes
> 15:37:59.202052 ARP, Request who-has 10.12.101.240 tell 10.11.19.147, len=
gth 28
> 15:37:59.258459 ARP, Request who-has 10.83.29.192 tell 10.11.19.147, leng=
th 28
[...]
> ^C
> 45 packets captured
> 47 packets received by filter
> 0 packets dropped by kernel
> # ifconfig vlan7
> vlan7: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu =
1500
> =9A =9A =9A =9Aoptions=3D3<RXCSUM,TXCSUM>
> =9A =9A =9A =9Aether f4:6d:04:7c:7b:d3
> =9A =9A =9A =9Ainet 10.11.19.149 netmask 0xfffffff8 broadcast 10.11.19.15=
1
> =9A =9A =9A =9Ainet6 fe80::f66d:4ff:fe7c:7bd3%vlan7 prefixlen 64 scopeid =
0x7
> =9A =9A =9A =9Ainet 10.11.19.145 netmask 0xfffffff8 broadcast 10.11.19.15=
1
> =9A =9A =9A =9Ainet 10.11.19.147 netmask 0xfffffff8 broadcast 10.11.19.15=
1
> =9A =9A =9A =9And6 options=3D29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
> =9A =9A =9A =9Amedia: Ethernet autoselect (1000baseT <full-duplex>)
> =9A =9A =9A =9Astatus: active
> =9A =9A =9A =9Avlan: 7 parent interface: re0

Looks suspicious, but what is the output of 'netstat -rnf inet'? That
will say what addresses are in a range that is routed or one that is
reached directly using ARP to get the MAC address.
--=20
R. Kevin Oberman, Network Engineer
E-mail: kob6558@gmail.com



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAN6yY1spw3ko8Ct6gE637G9TzCAE_92YJ=w9M_VB1FjA==PQtg>