Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 14 May 2008 18:32:21 -0400
From:      Jon Radel <jon@radel.com>
To:        Christer Solskogen <solskogen@carebears.mine.nu>,  freebsd questions <freebsd-questions@freebsd.org>
Subject:   Re: arplookup 0.0.0.0 failed: host is not on local network
Message-ID:  <482B6875.6070005@radel.com>
In-Reply-To: <g0fms3$8qs$1@ger.gmane.org>
References:  <g07lip$736$1@ger.gmane.org>	<6.0.0.22.2.20080511190114.0264af00@mail.computinginnovations.com>	<g09t4u$ads$1@ger.gmane.org>	<g0a0aa$lip$1@ger.gmane.org>	<6.0.0.22.2.20080512153543.02665c88@mail.computinginnovations.com>	<g0aa89$q0p$1@ger.gmane.org>	<6.0.0.22.2.20080512163401.026387f8@mail.computinginnovations.com>	<g0ei1m$r0a$1@ger.gmane.org>	<6.0.0.22.2.20080514131710.025269f0@mail.computinginnovations.com> <g0fms3$8qs$1@ger.gmane.org>

next in thread | previous in thread | raw e-mail | index | archive | help

This is a cryptographically signed message in MIME format.

--------------ms080407030000050400030004
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Christer Solskogen wrote:
> 
> Derek Ragona wrote:
> 
>> I would do a traceroute from all your hosts there.  When you do keep 
>> an eye out for the arp error message.  This should help find the host 
>> causing these errors and then look at that systems configuration.
>>
>> Also do you have more than one ethernet interface in the system 
>> showing the arp errors?  If you do, make sure the interfaces are on 
>> different subnets.
>>
>>
> 
> traceroute dont show anything(no response). Only ping responds, and ping 
> respodns with "192.168.0.1" - which is my router. My router on the other 
> hand do not have this arp problem. Only the other machines.
> 
> Every machine, except my router, have only one interface. (my router has 
> two, butthey are on to different subnets)
> 

OK, this problem amused me enough to play around.  Unfortunately, while 
I was able to, somehow, replicate the log entries on a FreeBSD 6.2 box, 
I don't know how, as it was a box that I wasn't using for my experiments 
(though on the same LAN segment as those I was using) and it was only 
the next day that I realized that it had taken offense at something I'd 
done.  By then I'd forgotten what I'd tried in which order....

In any case, what I can tell you:

On FreeBSD (various versions from 4.9 to 7.0) and MacOS X 10.4, ping 
0.0.0.0 appears to be the equivalent of pinging the ipv4 default gateway 
(if you use tcpdump you can actually see the packets with a destination 
address of 0.0.0.0 go out and the replies come in).  OpenBSD 4.2 and 
Windows XP basically tell you can't do such a foolish thing.  I think 
this is a red herring.

I doubt you have an interface with a 0.0.0.0 address.  What I suspect 
you have is some software, somewhere on the same segment as the machine 
logging the complaints, that is triggering an ARP query for 0.0.0.0.

If you really want to track this down, what I'd strongly urge you to 
start with is to, on a machine where the log entries happen, run the command

tcpdump -vvv -n -l -e arp

and see if you can catch ARP traffic mentioning 0.0.0.0.  If you catch 
one, this will give you the MAC address of the source of the traffic.  I 
would hope that this would help narrow it down.

Meanwhile, I'll see if I can replicate this when I'm paying a bit more 
attention.  :-)

--Jon Radel

--------------ms080407030000050400030004
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms080407030000050400030004--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?482B6875.6070005>