Solaris 10 invalid ARP requests from 0.0.0.0?

Posted by JWD on Server Fault See other posts from Server Fault or by JWD
Published on 2013-10-18T02:24:23Z Indexed on 2013/10/18 3:57 UTC
Read the original article Hit count: 585

Filed under:
|
|
|
|

The guys at the data center where I'm hosting a server running Solaris 10 are telling me that my server is making a lot of invalid arp requests. This is an example of a portion of what was sent to me from the logs (with Mac addresses and IP addresses changed).

xxxx:xxxx:xxxx/0.0.0.0/0000.0000.0000/[myipaddress]/[Datestamp])

I don't see anything in the arp tables (arp -a) or routing tables (netstat -r) and I don't see anything relating to 0.0.0.0 when snoping the arp requests.

The only place I see any reference to 0.0.0.0 is if I do netstat -a for the SCTP

SCTP:
        Local Address                   Remote Address          Swind  Send-Q Rwind  Recv-Q StrsI/O  State
------------------------------- ------------------------------- ------ ------ ------ ------ ------- -----------
0.0.0.0                         0.0.0.0                              0      0 102400      0  32/32  CLOSED

But not really sure what that means. Doesn't seem like I can disable SCTP.

Does anyone have any idea what might be causing this and how to stop it? I think the switch I'm connected to doesn't like it and momentarily drops the connection.

Is there anyway to at least block those requests using ipfilter or something else?

© Server Fault or respective owner

Related posts about networking

Related posts about solaris