arpwatch detects bogon or flip flop for 0.0.0.0
Issue
- arpwatch detects bogon on
0.0.0.0 - arpwatch detects flip flop on
0.0.0.0with bogons disabled - arpwatch logs messages like:
arpwatch: bogon 0.0.0.0 52:54:0:aa:aa:aa
arpwatch: bogon 0.0.0.0 52:54:0:bb:bb:bb
and/or:
arpwatch: flip flop 0.0.0.0 52:54:0:aa:aa:aa (52:54:0:bb:bb:bb)
arpwatch: flip flop 0.0.0.0 52:54:0:bb:bb:bb (52:54:0:aa:aa:aa)
Environment
- Red Hat Enterprise Linux
- arpwatch service running to monitor ARP, bogons, and IPv4 duplicate addresses
arpwatch-2.1a15-16.el6.x86_64arpwatch-2.1a15-33.el7.x86_64
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
