This is a good question that I've recently been fighting at one of my sites.
The obsoleted-by-the-manufacturer-5-years-ago router, HP, is a primitive,
but reliable device without many bells and whistles. Recently, on it's
logs, I've been getting some unusual 'ARP squeals', as well as the
troublesome request below. About all the log reveals is that it happened.
If I could get a MAC address, I could at the very least figure what the darn
thing is --- at this point I'm thinking printer with that 0.0.0.0 source.
The other out-of-range ARP complaint is an occasional foreign IP address;
again I need to pick up on that MAC.
Of course, all this happens intermittently, so it's hard to catch 'in the
act'. I fiddled with the Cisco 2900XL system message logs a bit, but don't
have a syslog server at that site (yet --- Kiwi?), so I haven't got a hit
(clue) on who the culprit(s) might be. Maybe I just don't know how yet;
maybe I need that syslog system; maybe I should break out the Fluke or
Sniffer. Sure seems like I could get those MAC addresses direct from the
switch, somehow, though.
Sooo, I await with great curiosity on the solution to this one
Best, G.
VP OGC
-Original Message-
From: Joaquim Lopes [mailto:[EMAIL PROTECTED]]
Sent: Friday, January 18, 2002 10:42 AM
To: [EMAIL PROTECTED]
Subject: Switch/router dhcp debug [7:32506]
Hi, is it possible to see from whitch device is a dhcp
request comming from,
S=0.0.0.0 d=255.255.255.255 mac=
Switch command -- ?
Router command -- ?
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=32521t=32506
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
