ARP problem in the logs - how to troubleshoot this?

[mke]

kernel arp: 0.0.0.0 moved from 00:bb:60:28:5c:85 to 88:78:73:94:5a:34 on igb2.22

I see multiple lines in my logs with 0.0.0.0 on one particular interface 22 only, why?

[Iahmad]

Hi @mke did you find the solution.let me know thanks

[stephenw10]

ARP movements are usually either some sort of load-balancing, like an actual load-balancer or teamed NICs in a server sharing one IP, or Apple's Bonjour sleep proxy. Check the OUI to see if it's Apple.

However it can also be an IP address conflict if two hosts are set to the same static IP. Check what those MAC addresses are on your network.

https://docs.netgate.com/pfsense/en/latest/monitoring/arp-moved-log-messages.html

Steve