Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login
    Introducing Netgate Nexus: Multi-Instance Management at Your Fingertips.

    Arp: moved from MAC to MAC?

    Scheduled Pinned Locked Moved Firewalling
    3 Posts 2 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A Offline
      AR15USR
      last edited by

      Not sure if this is the right board, but can anyone say why this is happening?

      This device is an NVR on its own interface (192.168.3.0/24). Seems to be happening about every hour and starts back on 3/26, a little over two weeks after I installed it.

      Apr 3 19:16:53	kernel		arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0
      Apr 3 18:16:50	kernel		arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0
      Apr 3 17:16:57	kernel		arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0
      Apr 3 16:16:53	kernel		arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0
      Apr 3 15:16:49	kernel		arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0
      Apr 3 14:16:57	kernel		arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0
      Apr 3 13:16:53	kernel		arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0
      Apr 3 12:16:49	kernel		arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0
      Apr 3 11:16:57	kernel		arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0
      Apr 3 10:16:54	kernel		arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0
      Apr 3 09:16:50	kernel		arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0
      Apr 3 08:16:46	kernel		arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0
      Apr 3 07:16:54	kernel		arp: 192.168.3.5 moved from 0c:c4:7a:ae:ed:e8 to a4:14:37:ab:56:d1 on igb0
      Apr 3 07:16:35	kernel		arp: 192.168.3.5 moved from a4:14:37:ab:56:d1 to 0c:c4:7a:ae:ed:e8 on igb0
      ...
      

      2.6.0-RELEASE

      1 Reply Last reply Reply Quote 0
      • A Offline
        AR15USR
        last edited by

        I found some info if anyone is interested:

        https://doc.pfsense.org/index.php/ARP_moved_log_messages

        https://forums.freebsd.org/threads/31240/


        2.6.0-RELEASE

        1 Reply Last reply Reply Quote 0
        • M Offline
          moscato359
          last edited by

          I actually have been seeing similar stuff, just the to and from macs are identical

          it's bizarre

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2026 Rubicon Communications LLC (Netgate). All rights reserved.