Re: weird arps


Tom Dunigan 576-2522 (dunigan@thdsun.EPM.ORNL.GOV)
Wed, 19 Oct 88 07:46:46 EDT


15:35:59.87 8:0:89:d0:1:1 ff:ff:ff:ff:ff:ff 0806 60: arp who-has 0.0.0.144 tell 0.0.0.6
15:35:59.91 8:0:89:d0:23:25 ff:ff:ff:ff:ff:ff 0806 60: arp who-has 0.0.0.243 tell 0.0.0.144

the preceding messages are from Kinetics/Macintosh/Appletalk boxes
perhaps attempting to communicate their presence and possibly appletalk number,
usually seen when Kinetics box is booted

16:24:31.52 2:60:8c:6:35:71 ff:ff:ff:ff:ff:ff 0806 60: arp who-has 128.183.255.255 tell vlsi2.gsfc.nasa.gov
16:46:24.74 8:0:20:1:90:df ff:ff:ff:ff:ff:ff 0806 60: arp who-has 128.183.255.255 tell ltpsun.gsfc.nasa.gov

the above usually arise from a mixture of machines with different broadcast
masks (e.g., in your case, some machines are running with old
mask convention of 128.183.0.0 rather than present practice of 128.183.255.255),so when one of the older mask machines sees a UDP broadcast (e.g. whod)
from a machine under the newer mask, it fires off the ARP



This archive was generated by hypermail 2.0b3 on Thu Mar 09 2000 - 14:43:56 GMT