arp: attempt to overwrite entry for 10.0.0.2 on sis0 by 00:30:cd:00:00:78 on sis2

[scorch]

I seem to be getting a fair few of these on my firewall recently, 
looking like arp cache poisoning. it may be related to me losing service 
occasionally.

I can't see how i could get pf to filter on what is effectively a lower 
level protocol.

what other options do i have?


a+
scorch