From owner-freebsd-questions@FreeBSD.ORG Sat Aug 11 17:24:43 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id CF62C16A417 for ; Sat, 11 Aug 2007 17:24:43 +0000 (UTC) (envelope-from freebsd@dfwlp.com) Received: from pollux.dfwlp.com (rrcs-64-183-212-244.sw.biz.rr.com [64.183.212.244]) by mx1.freebsd.org (Postfix) with ESMTP id 9984013C474 for ; Sat, 11 Aug 2007 17:24:43 +0000 (UTC) (envelope-from freebsd@dfwlp.com) Received: from athena.dfwlp.com (athena.dfwlp.com [192.168.125.83]) (authenticated bits=0) by pollux.dfwlp.com (8.13.8/8.13.8) with ESMTP id l7BHOe94072703 for ; Sat, 11 Aug 2007 12:24:40 -0500 (CDT) (envelope-from freebsd@dfwlp.com) From: Jonathan Horne To: freebsd-questions@freebsd.org Date: Sat, 11 Aug 2007 12:24:40 -0500 User-Agent: KMail/1.9.7 References: <200708111612.l7BGCGmP001414@cheyenne.sixcompanies.com> In-Reply-To: <200708111612.l7BGCGmP001414@cheyenne.sixcompanies.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200708111224.40490.freebsd@dfwlp.com> X-Spam-Status: No, score=-4.4 required=3.6 tests=ALL_TRUSTED,BAYES_00 autolearn=ham version=3.2.1 X-Spam-Checker-Version: SpamAssassin 3.2.1 (2007-05-02) on pollux.dfwlp.com Subject: Re: arp on cable modems X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 11 Aug 2007 17:24:43 -0000 On Saturday 11 August 2007 11:12:15 JD Bronson wrote: > Is there any rule in pf to dump this crap? > tcpdump just shows streams of this stuff!! > > > > 11:10:06.810287 arp who-has CPE-65-27-48-161.wi.res.rr.com tell > CPE-65-27-48-1.wi.res.rr.com > 11:10:06.864875 arp who-has CPE-65-27-48-74.wi.res.rr.com tell > CPE-65-27-48-1.wi.res.rr.com > 11:10:06.931964 arp who-has CPE-72-128-121-89.wi.res.rr.com tell > CPE-72-128-112-1.wi.res.rr.com > 11:10:06.946955 arp who-has CPE-72-128-112-152.wi.res.rr.com tell > CPE-72-128-112-1.wi.res.rr.com > 11:10:07.087627 arp who-has CPE-72-128-120-184.wi.res.rr.com tell > CPE-72-128-112-1.wi.res.rr.com > 11:10:07.110739 arp who-has CPE-72-128-114-39.wi.res.rr.com tell > CPE-72-128-112-1.wi.res.rr.com > 11:10:07.113737 arp who-has CPE-72-128-127-248.wi.res.rr.com tell > CPE-72-128-112-1.wi.res.rr.com > 11:10:07.174330 arp who-has CPE-72-128-119-17.wi.res.rr.com tell > CPE-72-128-112-1.wi.res.rr.com > 11:10:07.222803 arp who-has CPE-72-128-126-131.wi.res.rr.com tell > CPE-72-128-112-1.wi.res.rr.com > 11:10:07.413698 arp who-has CPE-72-128-125-148.wi.res.rr.com tell > CPE-72-128-112-1.wi.res.rr.com > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" fairly certain your router still needs to participate in arp type traffic, so if you dont want to see it: tcpdump not arp (and man tcpdump!) -- Jonathan Horne http://dfwlpiki.dfwlp.org freebsd@dfwlp.com