From owner-freebsd-questions Sun Jan 19 7:33:57 2003 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7D68537B401 for ; Sun, 19 Jan 2003 07:33:56 -0800 (PST) Received: from pooh.ASARian.org (rdu25-13-075.nc.rr.com [24.25.13.75]) by mx1.FreeBSD.org (Postfix) with ESMTP id CDB0143F18 for ; Sun, 19 Jan 2003 07:33:55 -0800 (PST) (envelope-from fuzzy@pooh.ASARian.org) Received: from localhost (fuzzy@localhost.ASARian.org [127.0.0.1]) by pooh.ASARian.org (8.12.6/8.12.6) with ESMTP id h0JFY1UH024111 for ; Sun, 19 Jan 2003 10:34:01 -0500 (EST) (envelope-from fuzzy@pooh.ASARian.org) Date: Sun, 19 Jan 2003 10:34:01 -0500 (EST) From: Fuzzy To: freebsd-questions@FreeBSD.ORG Subject: re: pooh.ASARian.org security run output Message-ID: X-No-Archive: Yes Organization: ASARian Inc. MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Is there a way to stop the service giving the data to syslog from logging this or syslogd from recording it? I did see mention of a sysctl to do that: net.link.ether.inet.log_arp_wrong_iface I tried both 1 and 0 and still get these messages. It looks like my ISP has 2 MACs with the same IP address and every time arp discovers its chnaged it logs information. Thanks Fuzzy ---> from periodic output pooh.ASARian.org kernel log messages: > arp: 24.25.12.1 moved from 00:07:0d:aa:ec:54 to 00:07:0d:aa:ec:8c on rl0 > arp: 24.25.12.1 moved from 00:07:0d:aa:ec:8c to 00:07:0d:aa:ec:54 on rl0 > arp: 24.25.12.1 moved from 00:07:0d:aa:ec:54 to 00:07:0d:aa:ec:8c on rl0 > arp: 24.25.12.1 moved from 00:07:0d:aa:ec:8c to 00:07:0d:aa:ec:54 on rl0 > arp: 24.25.12.1 moved from 00:07:0d:aa:ec:54 to 00:07:0d:aa:ec:8c on rl0 > arp: 24.25.12.1 moved from 00:07:0d:aa:ec:8c to 00:07:0d:aa:ec:54 on rl0 > arp: 24.25.12.1 moved from 00:07:0d:aa:ec:54 to 00:07:0d:aa:ec:8c on rl0 > arp: 24.25.12.1 moved from 00:07:0d:aa:ec:8c to 00:07:0d:aa:ec:54 on rl0 > arp: 24.25.12.1 moved from 00:07:0d:aa:ec:54 to 00:07:0d:aa:ec:8c on rl0 > arp: 24.25.12.1 moved from 00:07:0d:aa:ec:8c to 00:07:0d:aa:ec:54 on rl0 -- End of security output -- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message