Nope.. Centos 3.4 box routing avg 14 Mb/s.

Craig

_____

From: centos-bounces@centos.org [mailto:centos-bounces@centos.org] On Behalf Of Edward Milstein Sent: Monday, June 11, 2007 10:00 PM To: CentOS mailing list Subject: Re: [CentOS] ARP Problem ???

Craig Van Ham wrote:

Hi all,

Does any one know if this is normal operating of ARP. Or where to start looking.

I am seeing a lot of ARP requests for my router IP from the same IP within seconds.

21:04:41.112929 arp who-has IP tell MY ROUTERS IP

21:04:41.186354 arp who-has IP tell MY ROUTERS IP

21:04:41.372972 arp who-has IP tell MY ROUTERS IP

21:04:41.546921 arp who-has IP tell MY ROUTERS IP

21:04:41.640253 arp who-has IP tell MY ROUTERS IP

21:04:42.104746 arp who-has IP tell MY ROUTERS IP

21:04:42.208952 arp who-has IP tell MY ROUTERS IP

21:04:42.212961 arp who-has IP tell MY ROUTERS IP

21:04:42.304306 arp who-has IP tell MY ROUTERS IP

21:04:42.330411 arp who-has IP tell MY ROUTERS IP

21:04:42.331394 arp who-has IP tell MY ROUTERS IP

21:04:42.332737 arp who-has IP tell MY ROUTERS IP

21:04:42.332740 arp who-has IP tell MY ROUTERS IP

21:04:42.332742 arp who-has IP tell MY ROUTERS IP

21:04:42.332744 arp who-has IP tell MY ROUTERS IP

21:04:42.332746 arp who-has IP tell MY ROUTERS IP

21:04:42.332748 arp who-has IP tell MY ROUTERS IP

21:04:42.334763 arp who-has IP tell MY ROUTERS IP

21:04:42.342436 arp who-has IP tell MY ROUTERS IP

21:04:42.344443 arp who-has IP tell MY ROUTERS IP

21:04:42.350132 arp who-has IP tell MY ROUTERS IP

21:04:42.352140 arp who-has IP tell MY ROUTERS IP

21:04:42.358496 arp who-has IP tell MY ROUTERS IP

21:04:42.360168 arp who-has IP tell MY ROUTERS IP

21:04:42.360172 arp who-has IP tell MY ROUTERS IP

21:04:42.362177 arp who-has IP tell MY ROUTERS IP

21:04:42.362180 arp who-has IP tell MY ROUTERS IP

21:04:42.364189 arp who-has IP tell MY ROUTERS IP

21:04:42.366203 arp who-has IP tell MY ROUTERS IP

21:04:42.368200 arp who-has IP tell MY ROUTERS IP

21:04:42.369542 arp who-has IP tell MY ROUTERS IP

21:04:42.370208 arp who-has IP tell MY ROUTERS IP

21:04:42.370211 arp who-has IP tell MY ROUTERS IP

21:04:42.370877 arp who-has IP tell MY ROUTERS IP

21:04:42.372884 arp who-has IP tell MY ROUTERS IP

21:04:42.376232 arp who-has IP tell MY ROUTERS IP

21:04:42.376898 arp who-has IP tell MY ROUTERS IP

21:04:42.377233 arp who-has IP tell MY ROUTERS IP

21:04:42.377901 arp who-has IP tell MY ROUTERS IP

21:04:42.378242 arp who-has IP tell MY ROUTERS IP

21:04:42.378245 arp who-has IP tell MY ROUTERS IP

21:04:42.378247 arp who-has IP tell MY ROUTERS IP

Is this a Cisco 678???

-ed-

Robert Moskowitz wrote:

Craig Van Ham wrote:

...

Does any one know if this is normal operating of ARP… Or where to start looking…

I am seeing a lot of ARP requests for my router IP from the same IP within seconds.

21:04:41.112929 arp who-has IP tell MY ROUTERS IP

Get us the MAC address that is asking. This will give us the card manufacturer, which will then, perhaps tell you which system on your network is the culprit.

---

CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

It looks like it's his router that is asking and the requested device is not responding. Is the "who-has IP" address up and valid?

Bob...

It's multiple IPs of clients on the network.

-----Original Message----- From: centos-bounces@centos.org [mailto:centos-bounces@centos.org] On Behalf Of Robert Moskowitz Sent: Tuesday, June 12, 2007 8:19 AM To: CentOS mailing list Subject: Re: [CentOS] ARP Problem ???

Bob Chiodini wrote:

Robert Moskowitz wrote:

...

Craig Van Ham wrote:

...

Does any one know if this is normal operating of ARP. Or where to start looking.

I am seeing a lot of ARP requests for my router IP from the same IP within seconds.

21:04:41.112929 arp who-has IP tell MY ROUTERS IP

Get us the MAC address that is asking. This will give us the card manufacturer, which will then, perhaps tell you which system on your network is the culprit.

---

CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

It looks like it's his router that is asking and the requested device is not responding. Is the "who-has IP" address up and valid?

It would be interesting to know what IP address is being asked for.

For example, this is the router asking, and of course the router's interface is statically configured, and the address it is looking for is either its:

The DNS server The NTP server The SYSLOG server The COPS policy server (yeah, like anyone has implemented COPS and if they did, this would be an anycast)

The SYSLOG server has my bet, as a router, configured for remote syslogging will always have something to send to its syslog...

_______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

My router is 139.142.16.1.

It does this to a couple IP's

8:18:08.684747 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.713629 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.713994 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.714001 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.714800 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.717638 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.719260 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.720477 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.721289 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.724126 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.725343 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.729802 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.732665 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.733863 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.736291 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.738724 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.744828 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.750894 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.750903 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.750910 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.752520 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.756164 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.761842 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.761850 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.761856 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.764687 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.768735 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.771586 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.772785 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.774406 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.778064 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.778071 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.780488 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.782526 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.782533 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.783736 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.791437 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.792658 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.792665 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.793064 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.795086 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.798736 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.799546 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.800358 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.803198 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.806449 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.809684 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.817398 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.817406 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.820235 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.820637 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.820644 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.825504 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.831175 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.835640 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.837666 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.840096 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.845778 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.846583 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.847400 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.850233 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.854696 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.857133 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.860376 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.863621 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.868893 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.871723 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.873751 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.877406 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.880257 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.887551 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.888353 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.900118 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.900130 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.903363 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.905379 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.905792 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.908622 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.910650 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.913894 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.919975 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.926875 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.927276 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.927688 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.930520 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.934169 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.938629 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.949577 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.949983 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.950794 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.954856 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.956485 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.967435 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.968230 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.971074 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.973501 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.975535 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.977962 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.984044 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.986482 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.989317 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.992153 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.994181 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.998235 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.999863 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.002290 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.005130 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.007967 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.012838 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.016482 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.017700 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.023376 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.025815 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.033526 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.034755 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.036352 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.040407 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.044064 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.049732 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.051760 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.054617 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.057443 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.058654 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.061087 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.066785 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.073256 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.075685 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.079742 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.081766 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.083389 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.085415 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.090286 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.092715 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.093548 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.096779 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.099608 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.101636 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.104072 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.107313 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.108529 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.112183 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.114217 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.117855 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.124760 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.125977 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.128397 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.130428 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.134074 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.137724 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.140967 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.143806 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.148272 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.153537 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.157187 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.162462 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.166513 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.173000 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.175028 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.178677 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.182736 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.191663 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.198146 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.199357 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.200998 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.204629 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.206662 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.209495 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.214384 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.217199 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.220038 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.224096 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.230175 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.237884 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.241123 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.243962 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.249649 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.252071 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.256937 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.260992 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.267479 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.274378 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.280871 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.284916 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.290997 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.299514 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.304784 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.310867 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.319381 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.325877 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.328708 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.333169 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.340062 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.344932 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.349794 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.355876 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.361553 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.369262 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:09.684751 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:11.056821 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:12.054766 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:13.054746 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:14.065387 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:15.064770 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:16.064750 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:17.134786 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:18.134766 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:18.154691 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:18.155624 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:18.156774 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:18.159088 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:18.159782 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:18.160246 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:18.161170 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:18.161635 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:18.167446 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:18.167449 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:18.168576 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:18.170196 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:18.171815 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:19.134766 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:23.713935 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.704776 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.729517 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.736986 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.746705 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.756429 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.773643 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.784625 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.794328 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.805548 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.811782 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.816520 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.824996 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.842709 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.851185 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.861903 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.869881 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.880599 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.892083 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.896564 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.907775 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.918505 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.924481 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.933706 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.944677 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.954661 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.967117 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.976592 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:24.983573 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.000029 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.008506 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.018230 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.025960 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.036431 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.048904 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.062611 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.076580 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.095285 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.107991 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.119720 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.133695 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.150876 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.169337 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.182544 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.196005 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.215703 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.231411 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.250126 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.262578 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.280534 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.292248 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.305463 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.324663 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.337634 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.354336 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:25.704747 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:26.751641 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:27.744765 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:28.744748 arp who-has 139.142.16.57 tell 139.142.16.1

-----Original Message----- From: centos-bounces@centos.org [mailto:centos-bounces@centos.org] On Behalf Of Bob Chiodini Sent: Tuesday, June 12, 2007 6:39 AM To: CentOS mailing list Subject: Re: [CentOS] ARP Problem ???

Robert Moskowitz wrote:

Craig Van Ham wrote:

...

Does any one know if this is normal operating of ARP. Or where to start looking.

I am seeing a lot of ARP requests for my router IP from the same IP within seconds.

21:04:41.112929 arp who-has IP tell MY ROUTERS IP

Get us the MAC address that is asking. This will give us the card manufacturer, which will then, perhaps tell you which system on your network is the culprit.

---

CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

It looks like it's his router that is asking and the requested device is not responding. Is the "who-has IP" address up and valid?

Bob...

_______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos