Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 1 Feb 2003 17:20:53 -0500 (EST)
From:      "Stephen D. Kingrea" <reytech@sover.net>
To:        Juris Krumins <juriskr@komin.lv>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: arplookup 0.0.0.0
Message-ID:  <Pine.BSI.4.21.0302011638040.22762-100000@granite.sover.net>
In-Reply-To: <000f01c2c935$63d24710$0201010a@ntbdc>

next in thread | previous in thread | raw e-mail | index | archive | help
tcpdump tells me that incoming smtp requests are generating these
messages at the same time as recieving mail. i am pretty sure that
either sendmail or ipfw rules is the cause...

any good tutorials out there on interpreting tcpdump output?

stephen

On Fri, 31 Jan 2003, Juris Krumins wrote:

>Could be sendmail. But I would try first of all to figure out who are soucre
>of the arp request. Suppose we are talking about LAN or something like that.
>So try to find out the soucre of the request. Could be the same box, but I
>think it's not. So use sniffers like tcpdump or something like that. Just
>take a look at your logs to figure out the frequency of requests. So then
>you will figure out the source. unfortunately I'm not sendmail expert not
>even close.
>
>----- Original Message -----
>From: "Stephen D. Kingrea" <reytech@sover.net>
>To: "Juris Krumins" <juriskr@komin.lv>
>Sent: Friday, January 31, 2003 4:26 PM
>Subject: Re: arplookup 0.0.0.0
>
>
>> is there a way to suppress the message itself? i seem to be getting it
>> quite often, and really just started after configuring and activating
>> sendmail. i suspect that there is a possible misconfiguration involving
>> sendmail itself, but mail seems to be flowing nicely
>>
>> stephen d. kingrea
>>
>> On Fri, 31 Jan 2003, Juris Krumins wrote:
>>
>> >There's no such a term like default in arp table, like it is in routing
>> >tables.
>> >There's nothing you have to add.
>> >I think it was just a query which was sent to your machine. So your box
>> >didn't find anything about that in local his local arp table. That's why
>you
>> >got the answer like : www /kernel: arplookup 0.0.0.0 failed: host is not
>on
>> >local network mean that your box knows nothing about how to convert
>0.0.0.0
>> >IP adress into MAC adress.
>> >
>> >----- Original Message -----
>> >From: "Stephen D. Kingrea" <reytech@sover.net>
>> >To: <freebsd-questions@freebsd.org>
>> >Sent: Friday, January 31, 2003 4:07 PM
>> >Subject: arplookup 0.0.0.0
>> >
>> >
>> >> hope one of youse can help with this...
>> >>
>> >> i am suddenly and inexplicably getting the message:
>> >>
>> >> www /kernel: arpresolve: can't allocate llinfo for 0.0.0.0rt
>> >> www /kernel: arplookup 0.0.0.0 failed: host is not on local network
>> >>
>> >> nothing seems affected, that is to say that everything works as
>> >> advertised. do i need to add default to my arp tables?
>> >>
>> >> running 4.7, apache2, ipfw/natd, as gateway to 3 internal networked
>> >> nodes. what other info do i need to share?
>> >>
>> >> thank you!
>> >>
>> >> stephen d. kingrea
>> >>
>> >>
>> >> To Unsubscribe: send mail to majordomo@FreeBSD.org
>> >> with "unsubscribe freebsd-questions" in the body of the message
>> >>
>> >
>> >
>>
>>
>
>



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSI.4.21.0302011638040.22762-100000>