/usr/adm/syslog: hardware address not found

[Michael Bluemm]

Hi,
every minute I get 2 error messages in /usr/adm/syslog:
bootpd[12988]: hardware address not found: 524153206071 and
hardw.addr. not found:0030840E9033
How can I find out, which hardware is meant?
How can I disable this hardware, if possible/necessary?
Thank you, bye
Michael

[A. Clay Stephenson]

Hi,

If you are not booting any bootp devices from this server/workstation then the simplest solution would be:
1) vi /etc/inetd.conf
Find the bootps antry and comment it out by placing a '#' at the beginning of the line.
2) inetd -c to force a re-read of the config file.

These messages do no harm but they are annoying.

[Michael Bluemm]

Hi Clay,

my bootps entry is:
dgram udp wait root /etc/bootpd bootpd
- is this ok?

These entries,
could they belong to an old workstation?
to an old printer?
Where could I find out?
Thank you for your help

[Brian Hackley]

Michael,
You can look up the vendor code for the first 6 digits and that will tell you most likely who the vendor of the devices broadcasting the boot requests:
http://ftp.cavebear.com/CaveBear/Ethernet/vendor.html
You can also capture these devices on a sniffer trace most easily. Contact your network LAN support technicians to have that done. If you're that person, and do not have access to a sniffer, you can always attempt to capture a nettl trace while the broadcasts are going on.
Check out the IT Resource Center documents
HOW TO TAKE A NETWORK TRACE ON HP-UX KBRC00001272
or
HOW TO TAKE A NETWORK TRACE ON HP- KBAN00000068
Hope this helps,
-> Brian Hackley

[A. Clay Stephenson]

Hi Micheal,

Yes, that's the line to comment out if you are not a bootp server. You can use this website http://standards.ieee.org/regauth/oui to get a listing mapping the first 6 digits of a MAC address to a manufacturer. That should help point you to the equipment. You should note that these guys are broadcasting to your network for boot instructions and nobody is responding.

Good Hunting, Clay

[Raul_10]

look at /etc/bootptab for an entry with that MAC address, anyway it is a common error displayed if rbootd is running in the bootp server.

[melvyn burnard · Accepted solution]

You could first check that you have the latest bootp* patch for your OS version (which is not stated),
Or you could try this:

vi the /etc/syslog.conf file and change the line that reads :

*.info,mail.none /usr/adm/syslog

to


*.warning,mail.none /usr/adm/syslog


then do:
/sbin/init.d/syslogd stop
/sbin/init.d/syslogd start

HTH