On 2018-09-07, Jay Hart <jh...@kevla.org> wrote: > I'm now running my new router. Internal network is 192.168 based. I have two > interfaces on my > router, one external, one internal. Motherboard is a MITAC PDP11BICC using > Realtek NICs. > > I'm seeing a lot of messages in the log file regarding duplicate IP > Addresses, specifically I'm > seeing: > > /bsd: duplicate IP address 192.168.1.1 sent from ethernet 20:c0:47:dc:27:dd > > This translates to a Verizon MAC. My FIOS ONT is definitely Verizon. What I > struggling with is > what exactly is causing this message, and how to stop/resolve it. > > When I run 'Arp -a' either internally from another box, or on the router > itself, I'm not seeing > this MAC. > > Hoping the list can provide some additional troubleshooting ideas. Can this > be some sort of spoof > attempt??? > > Thanks, > > Jay > >
Run "tcpdump -ne -i $interface ether host 20:c0:47:dc:27:dd" on the internal and external interfaces, you should at least see which interface this is being sent on, and might get some other clues az to what it is. If you have a managed switch, you may be able to see which port it's coming from. "ifconfig -A" from your routerwould give us a clearer picture of the configuration.
