Arp: moved from MAC to MAC?
-
Not sure if this is the right board, but can anyone say why this is happening?
This device is an NVR on its own interface (192.168.3.0/24). Seems to be happening about every hour and starts back on 3/26, a little over two weeks after I installed it.
Apr 3 19:16:53 kernel arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0 Apr 3 18:16:50 kernel arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0 Apr 3 17:16:57 kernel arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0 Apr 3 16:16:53 kernel arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0 Apr 3 15:16:49 kernel arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0 Apr 3 14:16:57 kernel arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0 Apr 3 13:16:53 kernel arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0 Apr 3 12:16:49 kernel arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0 Apr 3 11:16:57 kernel arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0 Apr 3 10:16:54 kernel arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0 Apr 3 09:16:50 kernel arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0 Apr 3 08:16:46 kernel arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0 Apr 3 07:16:54 kernel arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0 Apr 3 07:16:35 kernel arp: 192.168.3.5 moved from a4:14:37:ab:56:d1 to 0c:c4:7a:ae:ed:e8 on igb0 ...
-
I found some info if anyone is interested:
https://doc.pfsense.org/index.php/ARP_moved_log_messages
https://forums.freebsd.org/threads/31240/
-
I actually have been seeing similar stuff, just the to and from macs are identical
it's bizarre