Community discussions

MUM Europe 2020
 
GREG3f
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 82
Joined: Wed Dec 03, 2008 9:52 pm

Log ARP Request source MAC or IP

Tue Jan 14, 2020 4:30 pm

Is there any way to log where an ARP request is coming from?

I am seeing thousands of requests hitting every subnet known to my gateway router. I am getting the "ipv4 neighbor table overflow, please consider increasing max-neighbor-entries" in my log which prompted me to monitor the ARP table and in there I discovered an arp entry for every IP know to the gateway which was approaching the max of 8000+. The IPs in the ARP table crossed many different subnets, some private including 192.168.x.x, 10.0.x.x and others as well as all the public subnets assigned to this gateway.

This seems to happen around every half hour, but is not on an exact schedule and sometimes it does not occur for several hours... but then it starts up again.

I am looking for a way to see where the requests are coming from in hopes of shutting it down.

I am running ROS 6.43.13 on a CCR1036-12G-4S

Who is online

Users browsing this forum: Chupaka, cornepiek, darkprocess, Google [Bot], Google Feedfetcher, LinusN, mbovenka, normis, quackyo and 152 guests