Date: Sun, 14 Nov 2021 13:24:33 -1000 From: "parv/freebsd" <parv.0zero9+freebsd@gmail.com> To: freebsd-questions@freebsd.org Subject: Re: Mute "arp: 01:02:03:04:05:06 is multicast"; find source? Message-ID: <CABObuOq=8zvTq5mtmPeuhn-5Oqq3CGprHcjxz-rRFy=Jx8c-Tg@mail.gmail.com> In-Reply-To: <CABObuOp34YmOUzxi5Oef0Pjc2A41Umy4%2BfDcnjJo5VdcJb_iTw@mail.gmail.com> References: <CABObuOp34YmOUzxi5Oef0Pjc2A41Umy4%2BfDcnjJo5VdcJb_iTw@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Nov 14, 2021 at 12:40 PM parv/freebsd wrote: > Is there any way to mute in syslog message ... > > arp: 01:02:03:04:05:06 is multicast > > ... or block|drop via some firewall rule? On some days it comes > nearly every hour, each instance shifted forwarded by few minutes ... > > ... > Nov 12 17:23:34 idas1 kernel: arp: 01:02:03:04:05:06 is multicast > Nov 12 18:25:22 idas1 kernel: arp: 01:02:03:04:05:06 is multicast > Nov 12 19:27:10 idas1 kernel: arp: 01:02:03:04:05:06 is multicast > ... > On a FreeBSD 12.2 host, it just gets logged. > On a (FreeBSD) 13.0 host, message is logged and also sent in daily email. > Thanks to pointer by @FreeBSDHelp on Twitter ... https://twitter.com/FreeBSDHelp/status/1460014829880557568 https://forums.freebsd.org/threads/arp-log-to-a-separate-file.55697/ ... I have added /etc/syslog.d/arp.conf to separate message spamming of /var/log/messages ... !arp,arpresolve *.* /var/log/arp.log > Also, how could I identify the source that causes the message in the > first place? > This I still would like to resolve. - parv
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CABObuOq=8zvTq5mtmPeuhn-5Oqq3CGprHcjxz-rRFy=Jx8c-Tg>