Re: Arp warnings at console, IP moving from/to same MAC address?

On Sat, Mar 10, 2007, Steve M. Fabac, Jr. wrote:
ThreeStar wrote:
On Mar 7, 10:50 am, corey.robin...@xxxxxxxxxxxxxxxx wrote:
Have a vendor-supported Unixware 7.1.3 server that is being flooded by
ARP messages at the console.
I understand that when you see an ARP message with the same IP address
yet different MAC addresses, it is generally a sign that you have
duplicate IP's on your network.
The messages that are displaying on our server have both the same IP
address and the same MAC address, though. Vendor has no idea what is
causing the issue and asked us to call them if we fix it so they know.

I have looked up each of the "offending" IP's, and they are all
printers. I'm not a Unix guy, so I'm hoping this makes sense to
someone here.

Example messages at console:
WARNING: arp: 10.0.44.155 moved from O:4:O:dd:48:cc to O:4:O:dd:48:cc
WARNING: arp: 10.0.44.155 moved from O:4:O:dd:48:cc to O:4:O:dd:48:cc

Appreciate any help.

I just got one of these today on an OpenServer 6. Turns out there
were duplicate IP addresses on the network. Not helpful that the
warning just repeats the MAC address of one of the offenders.

Amen to that. But if DNS is working properly, pinging the offending
IP address should display the host name of at least one of the machines
with the duplicate IP address. Visit that machine and change its
IP address to a known available address and the problem should be solved.

No. That's only going to give the hostname of the IP address,
which you already know.

This should return the name the machine know -- assuming it's not
running the Microsoft virus, Windows:

ssh 10.0.44.155 hostname

Bill
--
INTERNET: bill@xxxxxxxxxxxxx Bill Campbell; Celestial Software LLC
URL: http://www.celestial.com/ PO Box 820; 6641 E. Mercer Way
FAX: (206) 232-9186 Mercer Island, WA 98040-0820; (206) 236-1676

``Our Foreign dealings are an Open Book, generally a Check Book.''
Will Rogers
.

Relevant Pages