Date: Tue, 21 Dec 2004 11:43:22 +0900 From: gnn@FreeBSD.org To: Lee Johnston <lee@wildcard.net.uk> Cc: freebsd-net@FreeBSD.org Subject: Re: FreeBSD Router : ARP who-has requests Message-ID: <m23by0weut.wl@minion.local.neville-neil.com> In-Reply-To: <6.1.0.6.0.20041220191713.019eff38@mail.wildcardinternet.co.uk> References: <6.1.0.6.0.20041220191713.019eff38@mail.wildcardinternet.co.uk>
next in thread | previous in thread | raw e-mail | index | archive | help
At Mon, 20 Dec 2004 19:28:21 +0000, Lee Johnston wrote: > Does any one have any ideas on this? Could the kernel option (options HZ) > which we use for dummynet/polling effect the rate in which ARP requests are > issued? > > I had planned to place each subnet in a VLAN, and looks like this will have > to be done fairly quickly. But I just don't understand the sudden increase. > My only other though is that some could be port scanning, or someone has > just been exploited. > > Appreciate any feedback. > This may be obvious to you, but I would sniff the net for the IPs that are being arped for. Also, if you're being scanned there might be a pattern. Good luck, George
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?m23by0weut.wl>