> -----Original Message-----
> From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf
> Of OpenBSD
> Sent: 08 November 2017 15:44
> To: misc@openbsd.org
> Subject: Suppessing logging of arp movement messages
> 
> hello all,
> 
> I have finally build an internet gateway with OpenBSD 6.2 (AMD64),
> including pf and IPSec. Great stuff.
> Now I am seeing a lot of arp movement, that I know are caused by
> Apple's Bonjour Sleep Proxy.
> 
> Nov  8 00:00:27 gatekeeper /bsd: arp info overwritten for 192.168.20.99
> by 00:46:ab:ba:19:87 on vmx0 Nov  8 00:00:58 gatekeeper /bsd: arp info
> overwritten for 192.168.20.99 by 9c:ab:3b:ca:fe:99 on vmx0 Nov  8
> 00:01:57 gatekeeper /bsd: arp info overwritten for 192.168.20.99 by
> 00:46:ab:ba:19:87 on vmx0 Nov  8 00:02:04 gatekeeper /bsd: arp info
> overwritten for 192.168.20.99 by 9c:ab:3b:ca:fe:99 on vmx0 Nov  8
> 00:02:35 gatekeeper /bsd: arp info overwritten for 192.168.20.99 by
> 00:46:ab:ba:19:87 on vmx0 Nov  8 00:03:28 gatekeeper /bsd: arp info
> overwritten for 192.168.20.99 by 9c:ab:3b:ca:fe:99 on vmx0 Nov  8
> 00:03:42 gatekeeper /bsd: arp info overwritten for 192.168.20.99 by
> 00:46:ab:ba:19:87 on vmx0 Nov  8 00:04:27 gatekeeper /bsd: arp info
> overwritten for 192.168.20.99 by 9c:ab:3b:ca:fe:99 on vmx0
> 
> These messages are repeating every 15-30 seconds for Apple devices like
> laptops that are in standby (sleep mode).
> 
> On pfSense and FreeBSD you have a sysctl:
> net.link.ether.inet.log_arp_movements
> when set to zero it will no longer log the messages.
> 
> Discussions can be found on internet dating back to 2010, but no
> solution has been provided for what I could find.
> I have not yet found any sysctl in OpenBSD to do the same. Did I miss
> something or does OpenBSD have any trick to not log these messages.
> Currently these messages are filling up the logs /var/run/dmesg.boot
> and /var/log/messages.
> 
> Marco PC

Mi Marco
In freebsd is is usually done with 
sysctl net.link.ether.inet.log_arp_movements=0

and I guess this applies to openbsd too.
T

Reply via email to