pooh.ASARian.org security run output (lots of wrong arp messages)

[John Murphy]

Fuzzy <fuzzy at pooh.ASARian.org> wrote:
>
>Is there any way to convince the kernel not to log these
>incorrect arp messages?
>
>currently we have...
>net.link.ether.inet.log_arp_wrong_iface: 1
>
>Is there a different sysctl or variable for rc.conf
>to stop it from logging incorrect information?

Indeed there is but only in 5.0 or greater I believe.  It's called:

net.link.ether.inet.log_arp_movements

-- 
HTH
John.