From: Nick Drage <nickd@funkyjesus.org>
To: netfilter@lists.netfilter.org
Subject: Re: Too many ARP entries and Re: sendto: No buffer space available
Date: Tue, 3 Dec 2002 17:54:51 +0000 [thread overview]
Message-ID: <20021203175451.J14289@funkyjesus.org> (raw)
In-Reply-To: <875890239.20021203122724@pobox.com>; from andre.correa@pobox.com on Tue, Dec 03, 2002 at 12:27:24PM -0200
On Tue, Dec 03, 2002 at 12:27:24PM -0200, andre.correa@pobox.com wrote:
> root@linuxbox:~# tcpdump -i eth1 | grep arp
> tcpdump: listening on eth1
> Dec 3 11:16:52 linuxbox kernel: device eth1 entered promiscuous mode
<snip>
> 11:17:10.390134 arp reply 204.152.184.64 is-at 0:2:b9:1d:db:41
> 11:17:10.640043 arp who-has 200.225.157.104 tell linuxbox
> 11:17:10.640967 arp reply 200.225.157.104 is-at 0:2:b9:1d:db:41
> 11:17:10.689240 arp who-has 200.225.157.165 tell linuxbox
> 11:17:10.690768 arp reply 200.225.157.165 is-at 0:2:b9:1d:db:41
> 11:17:10.893170 arp who-has 200.225.157.163 tell linuxbox
> 11:17:10.894088 arp reply 200.225.157.163 is-at 0:2:b9:1d:db:41
> 11:17:10.980746 arp who-has 200.225.157.167 tell linuxbox
> 11:17:10.981714 arp reply 200.225.157.167 is-at 0:2:b9:1d:db:41
> 11:17:11.504255 arp who-has a.gtld-servers.net tell linuxbox
> 11:17:11.505926 arp reply a.gtld-servers.net is-at 0:2:b9:1d:db:41
>
> 2183 packets received by filter
> 0 packets dropped by kernel
>
> We see my linux box asking for MAC addresses of hosts outside
> its "local" network and my gateway, a Cisco 2621 answering those
> broadcasts with its own MAC address.
Yes, very peculiar. Your linuxbox appears to think the Internet is one big
switched network :)
What does
netstat -rn give you?
> For what I know, both are doing wrong. My box is not supposed to ask
> for those MACs and the Cisco is not supposed to answer.
Yes. Weren't you using PPPoE or similar? Not familiar with that at all but
that might be related.
> Does anybody have seen these before or have any ideas what would cause
> it?
Out of interest, where have you looked for answered to this problem?
Looking for overflowing arp tables via www.google.com or similar might give
you the answers you need.
--
FunkyJesus System Administration Team
next prev parent reply other threads:[~2002-12-03 17:54 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-12-02 13:16 sendto: No buffer space available andre.correa
2002-12-02 14:33 ` Bob Keyes
2002-12-02 14:46 ` Re[2]: " andre.correa
2002-12-02 20:28 ` Too many ARP entries and " andre.correa
2002-12-03 13:08 ` Cedric Blancher
2002-12-03 13:27 ` Nick Drage
2002-12-03 14:27 ` Re[2]: " andre.correa
2002-12-03 17:54 ` Nick Drage [this message]
2002-12-04 3:09 ` Paul Frieden
2002-12-04 15:23 ` Ard van Breemen
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20021203175451.J14289@funkyjesus.org \
--to=nickd@funkyjesus.org \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox