kernel arp moved from

Miguel López · Dec 5, 2018, 3:40 PM

Hi,
We are a Virtual machine, in a network segment, and the pfsense ARP table is changing continuously of MAC address learned from this VM.
It has only a network interface, and the ip address are not duplicate.

Dec 5 15:02:34 kernel arp: 10.10.0.10 moved from 00:50:56:b5:a6:c3 to 00:50:56:b5:f8:80 on em2
Dec 5 15:00:33 kernel arp: 10.10.0.10 moved from 00:50:56:b5:f8:80 to 00:50:56:b5:a6:c3 on em2
Dec 5 14:40:37 kernel arp: 10.10.0.10 moved from 00:50:56:b5:f8:80 to 00:50:56:b5:a6:c3 on em2
Dec 5 14:20:41 kernel arp: 10.10.0.10 moved from 00:50:56:b5:a6:c3 to 00:50:56:b5:f8:80 on em2

jimp · Dec 7, 2018, 8:53 PM

That error can only happen from two different MAC addresses attempting to use the same address. It could be an IP conflict, or it could be a windows VM doing NIC teaming. Both of those are VMware MACs, track down which VMs they belong to and find out what is happening.

Miguel López · Jan 2, 2019, 3:27 PM

Hello
Completely true, IP duplicated in the LAN segment.

Thank you so much.