Hi Folks,

My syslog is being spammed to death by one message:


Jan 25 09:33:01 mercury admin: [ARP][Arp address mismatch - Ethernet destination address doesn't match ARP target adress]

NB - the spelling mistake is taken direct from the syslog.

Any ideas on how to find the route cause?

Are you sure someone hasn't poisoned the ARP cache to redirect your traffic through a single host to capture passwords and snoop?

I'll double check but I'm fairly sure I can account for everything end to end in the routers Arp table.

ubercam wrote: Are you sure someone hasn't poisoned the ARP cache to redirect your traffic through a single host to capture passwords and snoop?

I can account for all traffic on the LAN, and I get this regularly:

Feb 2 23:33:33 x.x.x.x Vigor: [ARP][Arp address mismatch - Ethernet destination address doesn't match ARP target adress]

I get similar arp errors from my Xbox.. but it works fine so not bothered to investigate.

It looks like I have cloned a mac address for one of my VMs ... I suspect that amending this will clear the issue.