On 2/4/07, J. Alfred Prufrock <[EMAIL PROTECTED]> wrote:
tcpdump -vv -x -l results attached below. I just ran tcpdump; here's the line at which I get the error/warning/log message:19:14:03.562039 arp who-has rock tell 24.aaa.bbb.ccc [Note: 24.aaa.bbb.ccc is the cable-modem box's WAN address.] 0001 0800 0604 0001 000b 06bc 7b0e 1891 8674 0000 0000 0000 c0a8 000a 1102 1fdc c0a8 6401 008a 00bb 0000 2046 4445 19:14:03.562118 arp reply rock is-at 00:11:22:33:44:55 [Note: 00:11:22:33:44:55 is the OpenBSD box's outward-facing NIC's MAC address.] 0001 0800 0604 0002 0020 781f 00af c0a8 000a 000b 06bc 7b0e 1891 8674 1102 1fdc c0a8 6401 008a 00bb 0000 2046 4445
Grab that exchange again with the -n flag to tcpdump. Include the MAC address(es) of the cable modem if you can get them. DS
