2012/2/19 Коньков Евгений <kes-...@yandex.ru>:
> # tcpdump -n -i vlan7
> tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
> listening on vlan7, link-type EN10MB (Ethernet), capture size 65535 bytes
> 15:37:59.202052 ARP, Request who-has 10.12.101.240 tell 10.11.19.147, length 
> 28
> 15:37:59.258459 ARP, Request who-has 10.83.29.192 tell 10.11.19.147, length 28
[...]
> ^C
> 45 packets captured
> 47 packets received by filter
> 0 packets dropped by kernel
> # ifconfig vlan7
> vlan7: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
>        options=3<RXCSUM,TXCSUM>
>        ether f4:6d:04:7c:7b:d3
>        inet 10.11.19.149 netmask 0xfffffff8 broadcast 10.11.19.151
>        inet6 fe80::f66d:4ff:fe7c:7bd3%vlan7 prefixlen 64 scopeid 0x7
>        inet 10.11.19.145 netmask 0xfffffff8 broadcast 10.11.19.151
>        inet 10.11.19.147 netmask 0xfffffff8 broadcast 10.11.19.151
>        nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
>        media: Ethernet autoselect (1000baseT <full-duplex>)
>        status: active
>        vlan: 7 parent interface: re0

Looks suspicious, but what is the output of 'netstat -rnf inet'? That
will say what addresses are in a range that is routed or one that is
reached directly using ARP to get the MAC address.
-- 
R. Kevin Oberman, Network Engineer
E-mail: kob6...@gmail.com
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Reply via email to