Solaris 10 invalid ARP requests from 0.0.0.0?
Posted
by
JWD
on Server Fault
See other posts from Server Fault
or by JWD
Published on 2013-10-18T02:24:23Z
Indexed on
2013/10/18
3:57 UTC
Read the original article
Hit count: 585
The guys at the data center where I'm hosting a server running Solaris 10 are telling me that my server is making a lot of invalid arp requests. This is an example of a portion of what was sent to me from the logs (with Mac addresses and IP addresses changed).
xxxx:xxxx:xxxx/0.0.0.0/0000.0000.0000/[myipaddress]/[Datestamp])
I don't see anything in the arp tables (arp -a) or routing tables (netstat -r) and I don't see anything relating to 0.0.0.0 when snoping the arp requests.
The only place I see any reference to 0.0.0.0 is if I do netstat -a for the SCTP
SCTP:
Local Address Remote Address Swind Send-Q Rwind Recv-Q StrsI/O State
------------------------------- ------------------------------- ------ ------ ------ ------ ------- -----------
0.0.0.0 0.0.0.0 0 0 102400 0 32/32 CLOSED
But not really sure what that means. Doesn't seem like I can disable SCTP.
Does anyone have any idea what might be causing this and how to stop it? I think the switch I'm connected to doesn't like it and momentarily drops the connection.
Is there anyway to at least block those requests using ipfilter or something else?
© Server Fault or respective owner