Date: Sun, 13 Oct 2002 00:17:40 -0400 From: "Peter C. Lai" <sirmoo@cowbert.2y.net> To: William Wallace <ww@austin.rr.com> Cc: FreeBSD Security <freebsd-security@FreeBSD.ORG> Subject: Re: Kernel log message Message-ID: <20021013041740.GA39841@cowbert.2y.net> In-Reply-To: <ODEMJJBMDNGMFJHKBCMFGEGHEAAA.ww@austin.rr.com> References: <ODEMJJBMDNGMFJHKBCMFGEGHEAAA.ww@austin.rr.com>
next in thread | previous in thread | raw e-mail | index | archive | help
This looks like another candidate for an entry in the FAQ, since in the past 3 years that I have been on this list, questions about the arp messages have been asked and answered many many times. Take the message at face value. All it is saying is at Oct 5 08:03:57, the kernel detected that 192.168.100.2 broadcasted its MAC address as something different than what it had been broadcasting before. This could mean that 192.168.100.2 changed its MAC address, or that some other device decided to become 192.168.100.2 There are many causes of that happening; if I create an IP conflict with 2 devices having 192.168.100.2 and both keep broadcasting, that would cause the the MAC to alternate every time i talk to 192.168.100.1. On Sat, Oct 12, 2002 at 07:37:33PM -0500, William Wallace wrote: > > > Could someone explain to me what the following log message means: > > > > disco.wwallace.net kernel log messages: > > > arp: 192.168.100.2 moved from 00:20:78:0d:5a:7f to 00:00:78:0d:5a:7f on > > de0 > > > Oct 5 08:03:57 disco /kernel: arp: 192.168.100.2 moved from > > 00:20:78:0d:5a:7f to 00:00:78:0d:5a:7f on de0 > > > > The machine in question (192.168.100.2) is a Windows 2000 machine that has > > had the same NIC for years. Also, only one of the digits in the MAC > > address seems to have changed. What could cause this? > > > > Thanks, > > - William. > > > > -- Peter C. Lai University of Connecticut Dept. of Molecular and Cell Biology Yale University School of Medicine Center for Medical Informatics | Research Assistant http://cowbert.2y.net/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021013041740.GA39841>