freebsd sends arp queries for IP's in not it subnet
Kevin Oberman
kob6558 at gmail.com
Mon Feb 20 06:39:15 UTC 2012
2012/2/19 Коньков Евгений <kes-kes at yandex.ru>:
> # tcpdump -n -i vlan7
> tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
> listening on vlan7, link-type EN10MB (Ethernet), capture size 65535 bytes
> 15:37:59.202052 ARP, Request who-has 10.12.101.240 tell 10.11.19.147, length 28
> 15:37:59.258459 ARP, Request who-has 10.83.29.192 tell 10.11.19.147, length 28
[...]
> ^C
> 45 packets captured
> 47 packets received by filter
> 0 packets dropped by kernel
> # ifconfig vlan7
> vlan7: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
> options=3<RXCSUM,TXCSUM>
> ether f4:6d:04:7c:7b:d3
> inet 10.11.19.149 netmask 0xfffffff8 broadcast 10.11.19.151
> inet6 fe80::f66d:4ff:fe7c:7bd3%vlan7 prefixlen 64 scopeid 0x7
> inet 10.11.19.145 netmask 0xfffffff8 broadcast 10.11.19.151
> inet 10.11.19.147 netmask 0xfffffff8 broadcast 10.11.19.151
> nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
> media: Ethernet autoselect (1000baseT <full-duplex>)
> status: active
> vlan: 7 parent interface: re0
Looks suspicious, but what is the output of 'netstat -rnf inet'? That
will say what addresses are in a range that is routed or one that is
reached directly using ARP to get the MAC address.
--
R. Kevin Oberman, Network Engineer
E-mail: kob6558 at gmail.com
More information about the freebsd-net
mailing list