From owner-freebsd-questions Sat Feb 1 14:21:14 2003 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CAB8937B401 for ; Sat, 1 Feb 2003 14:21:11 -0800 (PST) Received: from mailgate1.sover.net (mailgate1.sover.net [209.198.87.60]) by mx1.FreeBSD.org (Postfix) with ESMTP id 17B8143F85 for ; Sat, 1 Feb 2003 14:21:11 -0800 (PST) (envelope-from reytech@sover.net) Received: from granite.sover.net (granite.sover.net [209.198.87.33]) by mailgate1.sover.net (8.11.6/8.11.6) with ESMTP id h11MKrW27411; Sat, 1 Feb 2003 17:20:54 -0500 (EST) Date: Sat, 1 Feb 2003 17:20:53 -0500 (EST) From: "Stephen D. Kingrea" To: Juris Krumins Cc: freebsd-questions@freebsd.org Subject: Re: arplookup 0.0.0.0 In-Reply-To: <000f01c2c935$63d24710$0201010a@ntbdc> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG tcpdump tells me that incoming smtp requests are generating these messages at the same time as recieving mail. i am pretty sure that either sendmail or ipfw rules is the cause... any good tutorials out there on interpreting tcpdump output? stephen On Fri, 31 Jan 2003, Juris Krumins wrote: >Could be sendmail. But I would try first of all to figure out who are soucre >of the arp request. Suppose we are talking about LAN or something like that. >So try to find out the soucre of the request. Could be the same box, but I >think it's not. So use sniffers like tcpdump or something like that. Just >take a look at your logs to figure out the frequency of requests. So then >you will figure out the source. unfortunately I'm not sendmail expert not >even close. > >----- Original Message ----- >From: "Stephen D. Kingrea" >To: "Juris Krumins" >Sent: Friday, January 31, 2003 4:26 PM >Subject: Re: arplookup 0.0.0.0 > > >> is there a way to suppress the message itself? i seem to be getting it >> quite often, and really just started after configuring and activating >> sendmail. i suspect that there is a possible misconfiguration involving >> sendmail itself, but mail seems to be flowing nicely >> >> stephen d. kingrea >> >> On Fri, 31 Jan 2003, Juris Krumins wrote: >> >> >There's no such a term like default in arp table, like it is in routing >> >tables. >> >There's nothing you have to add. >> >I think it was just a query which was sent to your machine. So your box >> >didn't find anything about that in local his local arp table. That's why >you >> >got the answer like : www /kernel: arplookup 0.0.0.0 failed: host is not >on >> >local network mean that your box knows nothing about how to convert >0.0.0.0 >> >IP adress into MAC adress. >> > >> >----- Original Message ----- >> >From: "Stephen D. Kingrea" >> >To: >> >Sent: Friday, January 31, 2003 4:07 PM >> >Subject: arplookup 0.0.0.0 >> > >> > >> >> hope one of youse can help with this... >> >> >> >> i am suddenly and inexplicably getting the message: >> >> >> >> www /kernel: arpresolve: can't allocate llinfo for 0.0.0.0rt >> >> www /kernel: arplookup 0.0.0.0 failed: host is not on local network >> >> >> >> nothing seems affected, that is to say that everything works as >> >> advertised. do i need to add default to my arp tables? >> >> >> >> running 4.7, apache2, ipfw/natd, as gateway to 3 internal networked >> >> nodes. what other info do i need to share? >> >> >> >> thank you! >> >> >> >> stephen d. kingrea >> >> >> >> >> >> To Unsubscribe: send mail to majordomo@FreeBSD.org >> >> with "unsubscribe freebsd-questions" in the body of the message >> >> >> > >> > >> >> > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message