topic Broken entries into arp table - why? in Operating System - Linux

Broken entries into arp table - why?

Vitaly Karasik_1 — Thu, 08 Nov 2007 04:56:04 GMT

From time to time I see weird entries into arp table, like this:

# arp -an
? (.10.10.10) at 00:03:B2:1D:17:13 [ether] on sw0

As you can see, the first octet into IP address is missed.

My questions are :
1) why?
2) how/if this can affect networking?

Re: Broken entries into arp table - why?

Steven E. Protter — Thu, 08 Nov 2007 08:01:17 GMT

Shalom Vitaly,

We talking Red Hat here?

I'm seeing the same results on some systems here and they are not having network problems.

I checked a few places out, but mostly the first octet is present.

I'm thinking about up2date/yum arp patches things like this. It may be a display problem in the utility versus an actual system problem.

SEP

Re: Broken entries into arp table - why?

skt_skt — Sat, 10 Nov 2007 17:56:08 GMT

i dont see any of those type of entries in any of RHEL 2.1/3/4 servers?

what is the linux version,kernel and arptable rpm you have?

Re: Broken entries into arp table - why?

Vitaly Karasik_1 — Sun, 11 Nov 2007 02:39:02 GMT

It's RHEL3 with kernel 2.4.21-40.ELsmp.

"arp" utility isn't related to "arptable" (which is more or less "iptables" analog).

arp is a part of net-tools-1.60-20E.9.

Af far as I see, arp table on this server is very dynamic because all our server have bonding (BASP of Broadcom + Intel's)