too many Gratuitous ARPs

[George V. Neville-Neil]

At Wed, 16 Mar 2005 11:02:01 +0200,
Danny Braniss wrote:
> This is not my case, no kernel messages, I see the packets. (im mirrowing
> the traffic to another host so that i can 'sniff' it).
> 
> the host has indeed two nics, but only one is connected.
> The problem - if indeed it is - only appears on this host, and i have
> several identical ones, that don't show this.
> 

The first thing I would do is look at what is being arped for and then
figure out if there is an application on the machine that you don't
expect to be there.  ARPs happen because the machine wants to talk to
another machine.  So, you need to find out who it wants to talk to
(the IP address) and why (the program that is the source of the
traffic).

Later,
George