freebsd sends arp queries for IP's in not it subnet

Kevin Oberman kob6558 at gmail.com
Mon Feb 20 06:39:15 UTC 2012


2012/2/19 Коньков Евгений <kes-kes at yandex.ru>:
> # tcpdump -n -i vlan7
> tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
> listening on vlan7, link-type EN10MB (Ethernet), capture size 65535 bytes
> 15:37:59.202052 ARP, Request who-has 10.12.101.240 tell 10.11.19.147, length 28
> 15:37:59.258459 ARP, Request who-has 10.83.29.192 tell 10.11.19.147, length 28
[...]
> ^C
> 45 packets captured
> 47 packets received by filter
> 0 packets dropped by kernel
> # ifconfig vlan7
> vlan7: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
>        options=3<RXCSUM,TXCSUM>
>        ether f4:6d:04:7c:7b:d3
>        inet 10.11.19.149 netmask 0xfffffff8 broadcast 10.11.19.151
>        inet6 fe80::f66d:4ff:fe7c:7bd3%vlan7 prefixlen 64 scopeid 0x7
>        inet 10.11.19.145 netmask 0xfffffff8 broadcast 10.11.19.151
>        inet 10.11.19.147 netmask 0xfffffff8 broadcast 10.11.19.151
>        nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
>        media: Ethernet autoselect (1000baseT <full-duplex>)
>        status: active
>        vlan: 7 parent interface: re0

Looks suspicious, but what is the output of 'netstat -rnf inet'? That
will say what addresses are in a range that is routed or one that is
reached directly using ARP to get the MAC address.
-- 
R. Kevin Oberman, Network Engineer
E-mail: kob6558 at gmail.com


More information about the freebsd-net mailing list