Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id ; Tue, 17 Apr 2001 17:43:47 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id ; Tue, 17 Apr 2001 17:43:38 -0400 Received: from 13dyn45.delft.casema.net ([212.64.76.45]:9733 "EHLO abraracourcix.bitwizard.nl") by vger.kernel.org with ESMTP id ; Tue, 17 Apr 2001 17:43:33 -0400 Message-Id: <200104172143.XAA31675@cave.bitwizard.nl> Subject: Re: ARP responses broken! In-Reply-To: from Alan Cox at "Apr 17, 2001 05:05:16 pm" To: Alan Cox Date: Tue, 17 Apr 2001 23:43:06 +0200 (MEST) CC: Martin Josefsson , Andi Kleen , Eric Weigle , Sampsa Ranta , linux-net@vger.kernel.org, linux-kernel@vger.kernel.org, zebra@zebra.org From: R.E.Wolff@BitWizard.nl (Rogier Wolff) X-Mailer: ELM [version 2.4ME+ PL60 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Alan Cox wrote: > > I was asking because I had this problem before (router with two cards > > against one physical subnet) and arpwatch complained that the router kept > > switching MACaddresses all the time. > That sounds like a bug in arpwatch. A box can have multiple mac > addresses. Its probably a tricky one to handle but arpwatch I guess > should spot and cope with repeated transitions between the same set > of addresses as one warning Well, two. Or three. - Hey, IP x changed from mac X to mac Y. - Hey, IP x changed back again to X. - Hmm. IP X seems to be using both Mac X and and Mac Y. No further warnings will be issued about this. If someone is taking over an IP address (which is especially what arpwatch should be looking for), this is exactly what you'll see. Having the issue be ignored after one warning is bad. Oh, and I know people who swear that this would be an invalid configuration, so that it is good for arpwatch to should loud and clear about it... Roger. -- ** R.E.Wolff@BitWizard.nl ** http://www.BitWizard.nl/ ** +31-15-2137555 ** *-- BitWizard writes Linux device drivers for any device you may have! --* * There are old pilots, and there are bold pilots. * There are also old, bald pilots. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/