system log messages kernel arp: 43:05:43:05:00:00 is multicast
-
hi there,
we are getting a lot of general system kernel messages
arp: 43:05:43:05:00:00 is multicast
but I cannot find that arp entry in arp diagnostics or arpwatch?
now I may need to fire up wireshark to determine where this is coming from. but from previous articles here I can see is that its from openmesh access points (in this case, draytek 903 in our environment). so we just want to stop the log files filling up so we can troubleshoot better. the workaround was:
net.link.ether.inet.allow_multicast=1
is this the best solution considering this was posted in 2105?
-
@solte98hotmail-com 43:something would for sure be a multicast mac..
Now what is the best way to not have them show up in your kernel messages?? Hmmmm
You could block the multicast at the switch the pfsense is connected to as another method.. Pfsense would rarely have need of seeing any mulicast at all..
I had a old power sensing bridge thing on the network many years ago, and they had mistakenly set the mac on their device as a multicast.. It caused some issues for sure, If I recall, if you brought it up to them, they sent me a new one with a proper mac..
Does the openmesh thing do this on purpose? Or is like a mistake on their part?
-
Multicast MACs are known on wifi mesh systems like that, yes.
https://docs.netgate.com/pfsense/en/latest/install/upgrade-before-2.2.html#microsoft-load-balancing-open-mesh-trafficSteve
