mac arp moved from-to DOS?

[Anuj Singh]

Hi,

FreeBSD fbsd1.com 7.1-RELEASE FreeBSD 7.1-RELEASE #0: Thu Jan  1
14:37:25 UTC 2009
root at logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  i386

 uptime
 4:33AM  up 3 days, 33 mins, 6 users, load averages: 4.15, 4.13, 4.16

I faced a problem on my server, and it stopped responding on network.
After logging in to the server I found services running normal as
usual.

I have following in my logs

4 03:23:19 fbsd7 kernel: arp: 10.139.7.15 moved from 00:22:19:ae:ea:0d
to 00:22:19:ae:ea:0f on age0
Apr  4 03:23:19 fbsd7 kernel: arp: 10.139.7.15 moved from
00:22:19:ae:ea:0f to 00:22:19:ae:ea:0d on age0
Apr  4 03:24:03 fbsd7 kernel: arp: 10.139.7.15 moved from
00:22:19:ae:ea:0d to 00:22:19:ae:ea:0f on age0
Apr  4 03:24:03 fbsd7 kernel: arp: 10.139.7.15 moved from
00:22:19:ae:ea:0f to 00:22:19:ae:ea:0d on age0
Apr  4 03:24:20 fbsd7 kernel: arp: 10.139.7.15 moved from
00:22:19:ae:ea:0d to 00:22:19:ae:ea:0f on age0
Apr  4 03:24:20 fbsd7 kernel: arp: 10.139.7.15 moved from
00:22:19:ae:ea:0f to 00:22:19:ae:ea:0d on age0
Apr  4 03:24:23 fbsd7 kernel: arp: 10.139.7.15 moved from
00:22:19:ae:ea:0d to 00:22:19:ae:ea:0f on age0
Apr  4 03:24:23 fbsd7 kernel: arp: 10.139.7.15 moved from
00:22:19:ae:ea:0f to 00:22:19:ae:ea:0d on age0
Apr  4 03:24:42 fbsd7 kernel: arp: 10.139.7.15 moved from
00:22:19:ae:ea:0d to 00:22:19:ae:ea:0f on age0
Apr  4 03:24:42 fbsd7 kernel: arp: 10.139.7.15 moved from
00:22:19:ae:ea:0f to 00:22:19:ae:ea:0d on age0
Apr  4 03:24:46 fbsd7 kernel: arp: 10.139.7.15 moved from
00:22:19:ae:ea:0d to 00:22:19:ae:ea:0f on age0
Apr  4 03:24:46 fbsd7 kernel: arp: 10.139.7.15 moved from
00:22:19:ae:ea:0f to 00:22:19:ae:ea:0d on age0
Apr  4 03:25:43 fbsd7 kernel: arp: 10.139.7.15 moved from
00:22:19:ae:ea:0d to 00:22:19:ae:ea:0f on age0
Apr  4 03:25:43 fbsd7 kernel: arp: 10.139.7.15 moved from
00:22:19:ae:ea:0f to 00:22:19:ae:ea:0d on age0
Apr  4 03:25:56 fbsd7 kernel: arp: 10.139.7.15 moved from
00:22:19:ae:ea:0d to 00:22:19:ae:ea:0f on age0
Apr  4 03:25:56 fbsd7 kernel: arp: 10.139.7.15 moved from
00:22:19:ae:ea:0f to 00:22:19:ae:ea:0d on age0
Apr  4 03:33:55 fbsd7 login: ROOT LOGIN (root) ON ttyv1
Apr  4 03:34:14 fbsd7 login: ROOT LOGIN (root) ON ttyv2
Apr  4 03:34:36 fbsd7 kernel: age0: interrupt moderation is 100 us.
Apr  4 03:34:36 fbsd7 kernel: age0: link state changed to DOWN
Apr  4 03:34:40 fbsd7 kernel: age0: link state changed to UP
Apr  4 03:34:43 fbsd7 kernel: arp: 10.139.7.15 moved from
00:22:19:ae:ea:0d to 00:22:19:ae:ea:0f on age0
Apr  4 03:34:43 fbsd7 kernel: arp: 10.139.7.15 moved from
00:22:19:ae:ea:0f to 00:22:19:ae:ea:0d on age0
Apr  4 03:34:45 fbsd7 kernel: arp: 10.139.7.15 moved from
00:22:19:ae:ea:0d to 00:22:19:ae:ea:0f on age0
Apr  4 03:34:45 fbsd7 kernel: arp: 10.139.7.15 moved from
00:22:19:ae:ea:0f to 00:22:19:ae:ea:0d on age0

10.139.7.15 is some windows machine...

is it a DOS?

After restarting the network service FreeBSD startet responding to the
network...

In above log i logged in to the system, ROOT LOGIN (root) ON ttyv1 and
i can see same messages of kernel arp in my messages, means machine
was on network (cause i have arp logs of the time when machine was not
responding).....

Any idea?

Thanks & Regards
Anuj Singh