arp on cable modems

[Jonathan Horne]

On Saturday 11 August 2007 11:12:15 JD Bronson wrote:
> Is there any rule in pf to dump this crap?
> tcpdump just shows streams of this stuff!!
>
>
>
> 11:10:06.810287 arp who-has CPE-65-27-48-161.wi.res.rr.com tell
> CPE-65-27-48-1.wi.res.rr.com
> 11:10:06.864875 arp who-has CPE-65-27-48-74.wi.res.rr.com tell
> CPE-65-27-48-1.wi.res.rr.com
> 11:10:06.931964 arp who-has CPE-72-128-121-89.wi.res.rr.com tell
> CPE-72-128-112-1.wi.res.rr.com
> 11:10:06.946955 arp who-has CPE-72-128-112-152.wi.res.rr.com tell
> CPE-72-128-112-1.wi.res.rr.com
> 11:10:07.087627 arp who-has CPE-72-128-120-184.wi.res.rr.com tell
> CPE-72-128-112-1.wi.res.rr.com
> 11:10:07.110739 arp who-has CPE-72-128-114-39.wi.res.rr.com tell
> CPE-72-128-112-1.wi.res.rr.com
> 11:10:07.113737 arp who-has CPE-72-128-127-248.wi.res.rr.com tell
> CPE-72-128-112-1.wi.res.rr.com
> 11:10:07.174330 arp who-has CPE-72-128-119-17.wi.res.rr.com tell
> CPE-72-128-112-1.wi.res.rr.com
> 11:10:07.222803 arp who-has CPE-72-128-126-131.wi.res.rr.com tell
> CPE-72-128-112-1.wi.res.rr.com
> 11:10:07.413698 arp who-has CPE-72-128-125-148.wi.res.rr.com tell
> CPE-72-128-112-1.wi.res.rr.com
>
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscribe at freebsd.org"

fairly certain your router still needs to participate in arp type traffic, so 
if you dont want to see it:

tcpdump not arp

(and man tcpdump!)
-- 
Jonathan Horne
http://dfwlpiki.dfwlp.org
freebsd at dfwlp.com