The default route for both machines is 172.16.1.1, which corresponds
to a Layer 3 part of a Cisco Catalyst 6506.
They both appear to be on the same subnet, so there should be no use of
this gateway.
Agreed. Just wanted to mention it so the mental picture of the network
was clear.
I'll clear out the arp caches and work on the tcpdump and submit that
in a bit. Both of these machines are remote, though, and the tcpdump
will also show a lot of traffic going to and from the machine I'm
ssh'ing into them from, yes?
Yea, but you can also exclude this host from the dump with the
appropriate syntax--maybe someone else knows a better way.
Thanks for that suggestion.
-Sean