Weird log entry
-
Any idea what this log entry means:
dhcpd: parse_option_buffer: option www-server (121) larger than buffer.
-
some malformed, weird dhcp packets coming in with custom options set?
Is there a dhcp lease just before or after, so you can see what device is sending the dhcp packet? -
There are these entries before the log entry mentioned:
Sep 10 10:42:39 dhclient[60048]: bound to 9x.8x.1xx.2xx – renewal in 14400 seconds.
Sep 10 10:42:39 dhclient[60048]: DHCPACK from 6x.1xx.3x.2xx
Sep 10 10:42:39 dhclient[60048]: SENDING DIRECT
Sep 10 10:42:39 dhclient[60048]: DHCPREQUEST on em0 to 6x.1xx.3x.2xx port 67I replaced some of the numbers with x's. The 9x.8x.1xx.2xx is my WAN IP address. I think the second address is my ISP. I am using 8.8.8.8 and 8.8.4.4 for DNS.
I also see something like this every once in a while (IP is not always the same): kernel: arplookup 100.183.158.141 failed: host is not on local network
Looking right before the first problem entry after a re-boot is the following entries:
root: IP-Blocklist was found not running
root: Countryblock was found not runningI think this is the process where it makes sure those packages are running.
-
Your ISP is handing some options to you in the DHCP lease it seems, nothing to be worried about, usually stuff for their own equipment.