Hi Piotr, On Tue, Apr 01, 2025 at 07:51:07PM +0200, Piotr Dzierzak wrote: > I have a router on Debian 12. The static / permanent arp entries are > disappearing in the system :/
This report is not very specific :-). Could you give me some more details on what these ARP entries look like exactly i.e. show the command/config you use to create them? I'd also recommend watching ip-monitor(8) to firgure out when this is happening exactly. Something like: $ stdbuf -oL ip -t monitor all | tee /tmp/ipmon.log or alternatively you can dump the raw kernel events into a file using rtmon(8) and print them later: $ rtmon file /tmp/rtmon.log [...] $ ip monitor file /tmp/rtmon.log IIRC even the raw rtmon dump doesn't contain the PID of the process making the change but we should be able to correlate the removal with what else is going on. Please attach an event dump in one of those formats. Beware: The files will be public in the Debian BTS. Send it to me directly if you don't like sharing your IP(s) publically. --Daniel
signature.asc
Description: PGP signature