tcpdump tells me that incoming smtp requests are generating these messages at the same time as recieving mail. i am pretty sure that either sendmail or ipfw rules is the cause...
any good tutorials out there on interpreting tcpdump output? stephen On Fri, 31 Jan 2003, Juris Krumins wrote: >Could be sendmail. But I would try first of all to figure out who are soucre >of the arp request. Suppose we are talking about LAN or something like that. >So try to find out the soucre of the request. Could be the same box, but I >think it's not. So use sniffers like tcpdump or something like that. Just >take a look at your logs to figure out the frequency of requests. So then >you will figure out the source. unfortunately I'm not sendmail expert not >even close. > >----- Original Message ----- >From: "Stephen D. Kingrea" <[EMAIL PROTECTED]> >To: "Juris Krumins" <[EMAIL PROTECTED]> >Sent: Friday, January 31, 2003 4:26 PM >Subject: Re: arplookup 0.0.0.0 > > >> is there a way to suppress the message itself? i seem to be getting it >> quite often, and really just started after configuring and activating >> sendmail. i suspect that there is a possible misconfiguration involving >> sendmail itself, but mail seems to be flowing nicely >> >> stephen d. kingrea >> >> On Fri, 31 Jan 2003, Juris Krumins wrote: >> >> >There's no such a term like default in arp table, like it is in routing >> >tables. >> >There's nothing you have to add. >> >I think it was just a query which was sent to your machine. So your box >> >didn't find anything about that in local his local arp table. That's why >you >> >got the answer like : www /kernel: arplookup 0.0.0.0 failed: host is not >on >> >local network mean that your box knows nothing about how to convert >0.0.0.0 >> >IP adress into MAC adress. >> > >> >----- Original Message ----- >> >From: "Stephen D. Kingrea" <[EMAIL PROTECTED]> >> >To: <[EMAIL PROTECTED]> >> >Sent: Friday, January 31, 2003 4:07 PM >> >Subject: arplookup 0.0.0.0 >> > >> > >> >> hope one of youse can help with this... >> >> >> >> i am suddenly and inexplicably getting the message: >> >> >> >> www /kernel: arpresolve: can't allocate llinfo for 0.0.0.0rt >> >> www /kernel: arplookup 0.0.0.0 failed: host is not on local network >> >> >> >> nothing seems affected, that is to say that everything works as >> >> advertised. do i need to add default to my arp tables? >> >> >> >> running 4.7, apache2, ipfw/natd, as gateway to 3 internal networked >> >> nodes. what other info do i need to share? >> >> >> >> thank you! >> >> >> >> stephen d. kingrea >> >> >> >> >> >> To Unsubscribe: send mail to [EMAIL PROTECTED] >> >> with "unsubscribe freebsd-questions" in the body of the message >> >> >> > >> > >> >> > > To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-questions" in the body of the message
