arp mac address is using my IP address 172.16.h.h on vmx4
-
Hi! I've been receiving kernel messages on system logs stating that a certain mac address is using the LAN ip 172.16.h.h?
It's not only on one mac address, it shows up for almost 100 mac address registered on the DHCP Static Mappings for the LAN interface. Our clients don't have admin privileges to change their ip settings so client's fiddling around is not an issue.
Any reason for this?
Here's the kernel sample logs as of yesterday. (I changed the mac address to xx)
11/7/2018 9:19 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:17 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:16 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:15 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:15 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:15 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:15 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:15 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:15 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:15 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:14 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:14 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:14 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:14 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:14 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:14 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:14 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:14 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:14 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:12 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:09 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:08 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:07 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:07 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 9:04 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:53 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:52 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:52 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:49 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:49 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:47 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:39 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:38 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:38 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:37 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:37 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:34 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:32 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:30 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:30 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:28 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:27 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:27 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:27 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:27 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:27 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:27 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:27 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:27 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:27 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:27 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:27 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:26 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:26 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:26 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:26 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:26 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:26 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:26 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:26 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:23 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:22 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:19 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:17 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:14 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:12 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:07 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:04 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:02 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 8:01 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 7:59 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 7:59 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 7:58 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 7:57 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 7:54 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 7:52 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 7:47 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 7:47 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 7:36 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/7/2018 7:34 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 19:36 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 19:22 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 19:20 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 19:07 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 19:05 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 18:37 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 18:35 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 17:06 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 17:06 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 17:05 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 17:05 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 16:54 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 16:52 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 16:49 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 16:48 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 16:44 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 16:43 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 16:43 kernel arp: xx:xx:xx:xx:xx:xx my IP address 192.168.h.h on vmx0!
11/6/2018 16:42 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 16:39 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 16:37 kernel arp: xx:xx:xx:xx:xx:xx my IP address 192.168.h.h on vmx0!
11/6/2018 16:36 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 16:36 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 16:34 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h on vmx4!
11/6/2018 16:32 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 16:28 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 16:27 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 16:21 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 16:20 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 16:19 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 16:18 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 16:18 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 16:16 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 16:16 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 16:16 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 16:13 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 16:12 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 16:09 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 16:06 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 16:06 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 16:05 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 15:58 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 15:57 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 15:54 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 15:51 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 15:51 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 15:51 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 15:50 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 15:46 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 15:44 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 15:43 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 15:43 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 15:42 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 15:41 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 15:39 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 15:39 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 15:38 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 15:36 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 15:34 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 15:33 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4!
11/6/2018 15:32 kernel arp: xx:xx:xx:xx:xx:xx my IP address 172.16.h.h11 on vmx4! -
Something is very badly wrong on your network judging by that. More info required though.
What IP addresses are you actually using there? I'm not sure why you redacted them since they're private IPs.
What subnets are they?
How are those interfaces connected?
Are the MACs just random? Are they real devices? If so go and check one. Make sure it really is using that IP.
Steve
-
Those are real mac addresses of devices on our LAN1 172.16.0.0/16 network which are statically mapped in the DHCP server static mappings for the LAN172 interface . Our gateway is the first IP in our LAN subnet. I tried changing the IP and pfsense kernel is showing the same message with the updated IP.
I already checked those devices and the set IP is not the gateway IP.
-
Ok so the gateway IP is the pfSense LAN interface? And that is vmx4?
Are all those redacted IPs the same? 172.16.0.1?
What is 172.16.h.h11?
Are the MACs repeated in those logs?
Something there is claiming to be that IP. Maybe you have an ARP proxy on the subnet? Maybe something doing something really weird!
Steve
-
yes, those are the same... the one with h11 is when I change the IP to .111 to see if it will still conflict and it did.
-
Hmm, seems like you might have something proxying ARP requests then or otherwise reflecting traffic that is triggering that warning.
What hypervisor are you using there? It's something affecting both interfaces.Also your logs seem to omit "is using" from those lines, is that what's actually logged in pfSense?
Steve
-
I'm using vmware esxi.
Here are the logs as of today for kernel:
11/9/2018 10:07 kernel arp: 7c:67:a2:e3:48:9c is using my IP address 172.16.0.1 on vmx4! 11/9/2018 10:06 kernel arp: 52:5b:24:ba:74:8b is using my IP address 172.16.0.1 on vmx4! 11/9/2018 10:06 kernel arp: 70:c9:4e:f9:c4:07 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 10:03 kernel arp: 98:22:ef:bf:a0:ef is using my IP address 172.16.0.1 on vmx4! 11/9/2018 10:03 kernel arp: b4:6b:fc:8e:85:f5 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 10:02 kernel arp: 70:c9:4e:eb:4b:35 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 10:02 kernel arp: 98:22:ef:b3:d0:21 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 10:01 kernel arp: 74:c6:3b:61:6f:6d is using my IP address 172.16.0.1 on vmx4! 11/9/2018 10:01 kernel arp: b4:6b:fc:8f:4b:bb is using my IP address 172.16.0.1 on vmx4! 11/9/2018 9:57 kernel arp: e4:42:a6:94:0a:9d is using my IP address 172.16.0.1 on vmx4! 11/9/2018 9:53 kernel arp: 98:5f:d3:ce:0a:a0 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 9:50 kernel arp: 70:85:c2:44:bf:2c is using my IP address 172.16.0.1 on vmx4! 11/9/2018 9:49 kernel arp: 70:85:c2:44:bf:2c is using my IP address 172.16.0.1 on vmx4! 11/9/2018 9:43 kernel arp: e4:42:a6:94:0a:9d is using my IP address 172.16.0.1 on vmx4! 11/9/2018 9:42 kernel arp: 3c:a0:67:fa:87:e3 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 9:40 kernel arp: 98:22:ef:bf:b6:91 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 9:38 kernel arp: b0:35:9f:26:96:6b is using my IP address 172.16.0.1 on vmx4! 11/9/2018 9:33 kernel arp: 3c:95:09:8f:38:e7 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 9:21 kernel arp: 3c:f8:62:b4:71:89 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 9:20 kernel arp: b8:9b:c9:f1:c5:66 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 9:19 kernel arp: b8:9b:c9:f1:c5:66 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 9:03 kernel arp: 3c:a0:67:6a:25:f1 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 8:56 kernel arp: 94:b8:6d:82:ad:a2 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 8:48 kernel arp: c6:11:91:29:31:57 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 8:47 kernel arp: 70:85:c2:44:bf:2c is using my IP address 172.16.0.1 on vmx4! 11/9/2018 8:44 kernel arp: 74:c6:3b:61:6f:4d is using my IP address 172.16.0.1 on vmx4! 11/9/2018 8:42 kernel arp: b4:ae:2b:e7:28:a2 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 8:41 kernel arp: 66:85:bb:13:d1:03 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 8:39 kernel arp: 9c:5c:8e:98:80:09 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 8:36 kernel arp: 94:b8:6d:08:be:ca is using my IP address 172.16.0.1 on vmx4! 11/9/2018 8:34 kernel arp: b8:9b:c9:f1:c5:66 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 8:34 kernel arp: b8:9b:c9:f1:c5:66 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 8:30 kernel arp: 78:cd:8e:81:08:42 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 8:30 kernel arp: f4:6d:04:42:bc:a2 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 8:30 kernel arp: b8:9b:c9:f1:e9:ef is using my IP address 172.16.0.1 on vmx4! 11/9/2018 8:28 kernel arp: 08:60:6e:e7:ae:a9 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 8:23 kernel arp: d0:50:99:78:36:c7 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 8:15 kernel arp: 70:c9:4e:eb:4b:35 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 8:09 kernel arp: b8:9b:c9:f1:c5:66 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 8:04 kernel arp: 08:60:6e:e7:ae:a9 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 7:57 kernel arp: 08:60:6e:e7:ae:a9 is using my IP address 172.16.0.1 on vmx4! 11/9/2018 7:50 kernel arp: 70:85:c2:45:44:ae is using my IP address 172.16.0.1 on vmx4! 11/8/2018 21:03 kernel arp: 9c:5c:8e:98:80:09 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 20:55 kernel arp: 9c:5c:8e:98:80:09 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 20:33 kernel arp: 9c:5c:8e:98:80:09 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 20:25 kernel arp: 9c:5c:8e:98:80:09 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 18:34 kernel arp: d0:17:c2:95:97:b5 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 18:33 kernel arp: d0:17:c2:95:97:b5 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 18:04 kernel arp: d0:17:c2:95:97:b5 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 18:03 kernel arp: d0:17:c2:95:97:b5 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 17:34 kernel arp: d0:17:c2:95:97:b5 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 17:33 kernel arp: d0:17:c2:95:97:b5 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 17:05 kernel arp: 18:31:bf:52:fa:3c is using my IP address 172.16.0.1 on vmx4! 11/8/2018 17:04 kernel arp: d0:17:c2:95:97:b5 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 17:03 kernel arp: 18:31:bf:52:fa:3c is using my IP address 172.16.0.1 on vmx4! 11/8/2018 16:38 kernel arp: 18:31:bf:52:fa:3c is using my IP address 172.16.0.1 on vmx4! 11/8/2018 16:37 kernel arp: packet with unknown hardware format 0x256 received on vmx4 11/8/2018 16:34 kernel arp: d0:17:c2:95:97:b5 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 16:33 kernel arp: d0:50:99:78:37:27 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 16:15 kernel arp: 9c:5c:8e:98:7d:29 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 16:04 kernel arp: d0:17:c2:95:97:b5 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 16:03 kernel arp: d0:50:99:78:37:27 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 15:40 kernel arp: 18:31:bf:dd:89:a9 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 15:38 kernel arp: d0:50:99:78:36:c5 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 15:34 kernel arp: d0:17:c2:95:97:b5 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 15:32 kernel arp: 9c:5c:8e:98:74:df is using my IP address 172.16.0.1 on vmx4! 11/8/2018 15:32 kernel arp: 9c:5c:8e:98:73:85 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 15:28 kernel arp: 18:31:bf:dd:8b:2d is using my IP address 172.16.0.1 on vmx4! 11/8/2018 15:26 kernel arp: 74:c6:3b:61:6f:6d is using my IP address 172.16.0.1 on vmx4! 11/8/2018 15:03 kernel arp: 74:c6:3b:61:96:79 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 15:01 kernel arp: 18:31:bf:dd:8b:2d is using my IP address 172.16.0.1 on vmx4! 11/8/2018 14:58 kernel arp: 70:85:c2:44:c2:52 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 14:56 kernel arp: c6:11:91:29:31:57 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 14:32 kernel arp: c6:11:91:29:31:57 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 14:32 kernel arp: d0:17:c2:95:97:b5 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 14:31 kernel arp: c6:11:91:29:31:57 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 14:30 kernel arp: c6:11:91:29:31:57 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 14:30 kernel arp: c6:11:91:29:31:57 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 14:28 kernel arp: d0:17:c2:95:97:b5 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 14:20 kernel arp: 74:c6:3b:61:96:79 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 14:03 kernel arp: 9c:5c:8e:98:74:44 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 14:02 kernel arp: 66:85:bb:13:d1:03 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 14:02 kernel arp: 9c:5c:8e:98:73:85 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 14:01 kernel arp: 9c:5c:8e:98:74:df is using my IP address 172.16.0.1 on vmx4! 11/8/2018 13:58 kernel arp: d0:50:99:78:37:14 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 13:30 kernel arp: 52:5b:24:ba:74:8b is using my IP address 172.16.0.1 on vmx4! 11/8/2018 13:30 kernel arp: 52:5b:24:ba:74:8b is using my IP address 172.16.0.1 on vmx4! 11/8/2018 13:30 kernel arp: 52:5b:24:ba:74:8b is using my IP address 172.16.0.1 on vmx4! 11/8/2018 13:30 kernel arp: e0:d5:5e:95:e0:2d is using my IP address 172.16.0.1 on vmx4! 11/8/2018 13:28 kernel arp: e0:d5:5e:95:e0:2d is using my IP address 172.16.0.1 on vmx4! 11/8/2018 13:24 kernel arp: 30:9c:23:9e:80:89 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 13:01 kernel arp: 9c:5c:8e:98:73:85 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 13:01 kernel arp: 9c:5c:8e:98:74:df is using my IP address 172.16.0.1 on vmx4! 11/8/2018 11:56 kernel arp: f4:6d:04:42:bc:a2 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 11:53 kernel arp: d0:50:99:78:37:27 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 11:39 kernel arp: 66:85:bb:13:d1:03 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 11:26 kernel arp: e0:d5:5e:95:e0:2d is using my IP address 172.16.0.1 on vmx4! 11/8/2018 11:26 kernel arp: e0:d5:5e:95:e4:43 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 11:26 kernel arp: 30:9c:23:9e:80:89 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 11:15 kernel arp: 66:85:bb:13:d1:03 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 11:12 kernel arp: e0:d5:5e:95:e0:2d is using my IP address 172.16.0.1 on vmx4! 11/8/2018 11:10 kernel arp: e4:42:a6:94:0a:9d is using my IP address 172.16.0.1 on vmx4! 11/8/2018 11:01 kernel arp: 98:22:ef:9c:ff:09 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 10:41 kernel arp: 9c:5c:8e:98:78:2c is using my IP address 172.16.0.1 on vmx4! 11/8/2018 10:23 kernel arp: 7c:67:a2:e3:48:9c is using my IP address 172.16.0.1 on vmx4! 11/8/2018 10:19 kernel arp: c6:11:91:29:31:57 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 10:17 kernel arp: a0:36:9f:22:4b:12 is using my IP address 192.168.12.1 on vmx0! 11/8/2018 9:55 kernel arp: 98:22:ef:9c:ff:09 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:49 kernel arp: b8:9b:c9:f1:ec:25 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:48 kernel arp: 18:31:bf:52:fe:4e is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:48 kernel arp: 18:31:bf:52:fe:48 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:48 kernel arp: 18:31:bf:52:fa:3c is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:48 kernel arp: 9c:5c:8e:98:73:85 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:48 kernel arp: 9c:5c:8e:98:80:95 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:48 kernel arp: 9c:5c:8e:98:7d:29 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:48 kernel arp: 18:31:bf:52:f7:53 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:48 kernel arp: 9c:5c:8e:98:76:9b is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:48 kernel arp: d0:17:c2:92:f7:74 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:48 kernel arp: 18:31:bf:52:f7:58 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:47 kernel arp: 9c:5c:8e:98:78:3c is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:46 kernel arp: 18:31:bf:52:f6:28 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:46 kernel arp: 18:31:bf:dd:88:ac is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:46 kernel arp: d0:17:c2:92:f9:a4 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:46 kernel arp: 9c:5c:8e:98:74:44 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:40 kernel arp: b0:52:16:3b:64:f7 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:32 kernel arp: 66:85:bb:13:d1:03 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:30 kernel arp: 66:85:bb:13:d1:03 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:18 kernel arp: 60:a4:4c:b0:c1:71 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:18 kernel arp: b8:9b:c9:f1:ea:eb is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:18 kernel arp: b8:9b:c9:f1:ea:eb is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:18 kernel arp: e0:d5:5e:95:e0:2d is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:17 kernel arp: 60:a4:4c:b0:c2:fa is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:15 kernel arp: f4:6d:04:42:bc:a2 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:15 kernel arp: b8:9b:c9:f1:ea:e5 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:15 kernel arp: 78:cd:8e:ab:e5:fb is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:15 kernel arp: f4:6d:04:44:46:a8 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:14 kernel arp: 60:a4:4c:b0:c3:05 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:14 kernel arp: 30:9c:23:9e:80:71 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:13 kernel arp: d0:50:99:6a:67:37 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:11 kernel arp: 60:a4:4c:b0:c4:91 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:10 kernel arp: d0:50:99:60:3b:15 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 9:09 kernel arp: 60:a4:4c:af:58:64 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:58 kernel arp: d0:50:99:78:36:c5 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:57 kernel arp: 44:1c:a8:3e:5a:85 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:55 kernel arp: 74:c6:3b:61:70:b9 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:54 kernel arp: d0:50:99:78:37:3f is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:52 kernel arp: 74:c6:3b:61:70:b9 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:51 kernel arp: 94:b8:6d:08:be:ca is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:51 kernel arp: 98:22:ef:b3:d0:21 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:51 kernel arp: 18:31:bf:52:f7:4d is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:48 kernel arp: 50:5b:c2:b9:ba:3f is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:48 kernel arp: 24:fd:52:fa:30:da is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:47 kernel arp: 3c:95:09:8f:38:e7 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:45 kernel arp: b4:6b:fc:8e:85:f5 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:44 kernel arp: 52:5b:24:ba:74:8b is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:44 kernel arp: 74:c6:3b:61:6f:4d is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:42 kernel arp: b8:9b:c9:f1:ea:eb is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:41 kernel arp: 52:5b:fc:c4:e4:53 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:41 kernel arp: b4:6b:fc:8f:4b:bb is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:40 kernel arp: d0:50:99:78:37:14 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:40 kernel arp: 52:5b:fc:c4:e4:53 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:40 kernel arp: 52:5b:fc:c4:e4:53 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:39 kernel arp: 18:31:bf:dd:89:a9 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:37 kernel arp: 70:c9:4e:eb:4b:35 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:37 kernel arp: d0:50:99:78:36:c7 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:36 kernel arp: d0:50:99:60:3b:15 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:35 kernel arp: 30:9c:23:9e:80:89 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:35 kernel arp: d0:50:99:6a:67:37 is using my IP address 172.16.0.1 on vmx4! 11/8/2018 8:30 kernel arp: f4:6d:04:42:bc:a2 is using my IP address 172.16.0.1 on vmx4! -
What hypervisor are you using? I suggest this is probably an issue with the virtual environment.
Steve
-
I figured out, the antivirus that is installed to some clients is causing the problem. Once uninstalled and replaced with a different antivirus, the IP conflict is gone.
I just don't see the reason on why an antivirus would do that thing though.
-
Hmm, no. Very odd.
Glad you found it though. Might help someone else hitting that.Steve
