From owner-freebsd-questions  Tue Jul 21 14:01:32 1998
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id OAA11568
          for freebsd-questions-outgoing; Tue, 21 Jul 1998 14:01:32 -0700 (PDT)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: from resnet.uoregon.edu (resnet.uoregon.edu [128.223.144.32])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id OAA11539
          for <questions@FreeBSD.ORG>; Tue, 21 Jul 1998 14:01:11 -0700 (PDT)
          (envelope-from dwhite@resnet.uoregon.edu)
Received: from localhost (dwhite@localhost)
          by resnet.uoregon.edu (8.8.5/8.8.8) with SMTP id OAA24598;
          Tue, 21 Jul 1998 14:00:36 -0700 (PDT)
          (envelope-from dwhite@resnet.uoregon.edu)
Date: Tue, 21 Jul 1998 14:00:36 -0700 (PDT)
From: Doug White <dwhite@resnet.uoregon.edu>
To: pirat sriyotha <pirat@center.oaep.go.th>
cc: FreeBSD questions <questions@FreeBSD.ORG>
Subject: Re: arpwatch: sent bad addr len
In-Reply-To: <Pine.BSF.3.96.980721111705.1153A-100000@parwati.oaep.go.th>
Message-ID: <Pine.BSF.4.00.9807211359540.8360-100000@resnet.uoregon.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG


On Tue, 21 Jul 1998, pirat sriyotha wrote:

> > > what effect if my machine get some message from arpwatch that says
> > > 
> > > arpwatch: 8:0:20:21:90:25 sent bad addr len (hard 6, prot 170)
> > > 
> > > this message repeats for nearly this afternoon.
> > > 
> > > can one stop such a kind of message ?
> > 
> > Go to whatever machine 8:0:20:21:90:25 is and figure out why it's doing
> > it.
> >
> 
> that is center. the machine is center, the same center as center that
> appear in my e-mail addrress.  and the name server too.
> 
> what i did was to inform sysadmin after getting  your answer.  but such a
> things still happens quite often.

okay.

> > Probably playing IPX games.
> > 
> 
> can one use ipfw, deny all from such_a_machine to my_machine, to stop
> a similar things ?

Actually, stop using arpwatch or hack arpwatch to either ignore that
number or comment out that error message printf().

I don't use arpwatch so I'm unfamiliar with it's features.

Doug White                              | University of Oregon  
Internet:  dwhite@resnet.uoregon.edu    | Residence Networking Assistant
http://gladstone.uoregon.edu/~dwhite    | Computer Science Major


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message