arp problem?

[Erik Norgaard]

spen wrote:
> I get this message all the time and I 've searched around forums but did not find something about it..
> 
> arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on xl0
> arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on xl0
> arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on xl0
> arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on xl0
> arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on xl0
> 
> after many times of repeating itself I get a message which says "last message repeated x times"..
> does anybody have any idea about it?
> ps: 10.101.10.47 is another pc on the local lan...

It appears that some host is misconfigured and is attempting to use an 
ocupied ip:

a) you have a static arp table with a different mac/ip.
b) your own interface is configured for that ip and someone else is trying 
to use it.

To investigate further: try using arping to find host with that mac and 
hosts with that ip.

Cheers, Erik
-- 
Ph: +34.666334818                                  web: www.locolomo.org
S/MIME Certificate: www.daemonsecurity.com/ca/8D03551FFCE04F06.crt
Subject ID:  9E:AA:18:E6:94:7A:91:44:0A:E4:DD:87:73:7F:4E:82:E7:08:9C:72
Fingerprint: 5B:D5:1E:3E:47:E7:EC:1C:4C:C8:3A:19:CC:AE:14:F5:DF:18:0F:B9