From owner-freebsd-questions Sat Feb 27 18:46: 3 1999 Delivered-To: freebsd-questions@freebsd.org Received: from dalamar.cs.uwec.edu (dalamar.cs.uwec.edu [137.28.109.74]) by hub.freebsd.org (Postfix) with ESMTP id 60F2F1518B for ; Sat, 27 Feb 1999 18:46:01 -0800 (PST) (envelope-from godfreja@dalamar.cs.uwec.edu) Received: from localhost (godfreja@localhost) by dalamar.cs.uwec.edu (8.8.7/8.8.7) with ESMTP id UAA24442; Sat, 27 Feb 1999 20:42:09 -0600 Date: Sat, 27 Feb 1999 20:42:09 -0600 (EST) From: Jason Andrew Godfrey To: Greg Lehey Cc: freebsd-questions@FreeBSD.ORG Subject: Re: syslog config question In-Reply-To: <19990228105459.R7279@lemis.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Sun, 28 Feb 1999, Greg Lehey wrote: > > I've just setup a new FreeBSD 3.1 Release box, and I keep on getting > > messages like: > > > > xxx /kernal: arp: xxx.xxx.xxx.xxx moved from blah_mac_address to > > another_mac_address on vx0. > > > > I'd like for these messages to disappear. > > Then catch the person who's using the IP address. > Hmmm. The message comes with such regularity and for so may IP's (even the campus gateway) that I attributed it to the network doing funky things. Maybe it is someone trying to spoof. I'll keep on eye on it for a little longer. > > > Could anyone help me come with the magical formula to get this > > message to disapper? > > Remove its cause, not the effect. It's a serious message. In any > case, the message comes from here, in /sys/netinet/if_arp.c: > Thanks for the idea on modifying the source. For some reason it didn't occur to me. "Use the source Luke...." Once again, thanks. -- Jason P.S. - (After using FreeBSD for about 2 years I just bought your book today. Good job. It's nice going to a bookstore and seeing FreeBSD stuff there.) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message