arp table entry: what is a "bogon"?

From: Richard Bemrose <rb237_at_phy.cam.ac.uk>
Date: Wed, 30 Sep 1998 14:34:49 +0100 (BST)

Hello fellow admin,

Re: Paul A. Scowen <PAUL.SCOWEN_at_ASU.Edu> poster regarding returning the
MAC address of any system:
http://www.ornl.gov/its/archives/mailing-lists/alpha-osf-managers/1998/02/msg00537.html

I recently installed 'arpwatch' (see above URL for link) which keep track
of ethernet/ip address pairings. The program passively monitors the local
workstation's ARP table and reports any new (or unauthorised)
workstations on your network sub-domain (although it can be easily
fooled). However, the localhost's daemon log is flooded with similar
entries (file size ~9Mb per day);

-- cut --
Sep 30 00:31:00 pol1 arpwatch: bogon 131.111.72.91 8:0:2b:bb:ca:c8
Sep 30 00:31:00 pol1 arpwatch: bogon 131.111.72.22 0:0:f8:76:f:b5
Sep 30 00:31:00 pol1 arpwatch: bogon 131.111.72.66 8:0:2b:3e:40:5e
-- cut --

What is a 'bogon' ARP table entry? FYI, the localhost netmask is
255.255.255.0. Any information would be appreciated.

Summary to follow.

Regards,
Rich

 /_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/ _ \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\
/_/ Richard A Bemrose /_\ Polymers and Colloids Group \_\
/_/ email: rb237_at_phy.cam.ac.uk /_\ Cavendish Laboratory \_\
/_/ Tel: +44 (0)1223 337 267 /_\ University of Cambridge \_\
/_/ Fax: +44 (0)1223 337 000 /_\ Madingley Road \_\
/_/ (space for rent) / \ Cambridge, CB3 0HE, UK \_\
 /_/_/_/_/_/_/ http://www.poco.phy.cam.ac.uk/~rb237 \_\_\_\_\_\_\
             "Life is everything and nothing all at once"
              -- Billy Corgan, Smashing Pumpkins
Received on Wed Sep 30 1998 - 13:35:48 NZST

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:38 NZDT