Hello fellow admin,
I must first thank all the people who replied;
K.McManus_at_greenwich.ac.uk
Sean O'Connell <sto_at_stat.Duke.EDU>
John Becker <John.Becker_at_digital.com>
Mike Clark <mrc7_at_cam.ac.uk>
John Line <jml4_at_cus.cam.ac.uk>
James Talbut <jet35_at_phy.cam.ac.uk>
In my original poster I commented that I recently installed 'arpwatch'
which passively keep track of ethernet/ip address pairings. However,
'arpwatch' flooded my 'daemon.log' with unknown 'bogon' entries. John
Becker <John.Becker_at_digital.com> and John Line <jml4_at_cus.cam.ac.uk> both
suggest these 'bogon' entries are bad ethernet packets arising from
multiple subnets sharing the same network wiring. For a more details
explanation read John Line's comments:
John Line <jml4_at_cus.cam.ac.uk> wrote:
> I'm not 100% sure, but I think from when I tried arpwatch a while ago
> that it means that the network component of the address "looks wrong"
> based on its impressions (OK, I couldn't work out what libpcap was
> actually returning to arpwatch :-) of what the network component
> is/should be. This is guaranteed to arise in some situations, such as
> when multiple subnets are sharing the same network wiring (due to
> running out of addresses or other reasons), so that a system configured
> with an address in subnet A sees an ARP relating to a system in subnet
> B. I know Physics has a number of subnets - is the bit of network where
> the oddity was seen shared between subnets? Alternatively, might the
> router connecting the subnet to the rest of the network be
> (mis)configured so it is "leaking" packets from other subnets?
Regards,
Rich
/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/ _ \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\
/_/ Richard A Bemrose /_\ Polymers and Colloids Group \_\
/_/ email: rb237_at_phy.cam.ac.uk /_\ Cavendish Laboratory \_\
/_/ Tel: +44 (0)1223 337 267 /_\ University of Cambridge \_\
/_/ Fax: +44 (0)1223 337 000 /_\ Madingley Road \_\
/_/ (space for rent) / \ Cambridge, CB3 0HE, UK \_\
/_/_/_/_/_/_/
http://www.poco.phy.cam.ac.uk/~rb237 \_\_\_\_\_\_\
"Life is everything and nothing all at once"
-- Billy Corgan, Smashing Pumpkins
Received on Thu Oct 01 1998 - 11:20:02 NZST