Hi Piotr,

On Tue, Apr 01, 2025 at 07:51:07PM +0200, Piotr Dzierzak wrote:
> I have a router on Debian 12. The static / permanent arp entries are
> disappearing in the system :/

This report is not very specific :-). Could you give me some more details
on what these ARP entries look like exactly i.e. show the command/config
you use to create them?

I'd also recommend watching ip-monitor(8) to firgure out when this is
happening exactly. Something like:

    $ stdbuf -oL ip -t monitor all | tee /tmp/ipmon.log

or alternatively you can dump the raw kernel events into a file using
rtmon(8) and print them later:

   $ rtmon file /tmp/rtmon.log
   [...]
   $ ip monitor file /tmp/rtmon.log

IIRC even the raw rtmon dump doesn't contain the PID of the process making
the change but we should be able to correlate the removal with what else is
going on.

Please attach an event dump in one of those formats. Beware: The files will
be public in the Debian BTS. Send it to me directly if you don't like
sharing your IP(s) publically.

--Daniel

Attachment: signature.asc
Description: PGP signature

Reply via email to