: --------------474144BDA5A7C9C9650B48B6
: Content-Type: text/plain; charset=us-ascii
: Content-Transfer-Encoding: 7bit
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Don't do this, it's annoying.
: Can anyone tell me what causes these messages:
: 14:36:42.111662 arp who-has 192.84.162.2(Broadcast) tell
: EXTERNALWEB.help.com
Externalweb.help.com wants to talk to the machine at 192.84.162.2. It has
decided that this machine is on its local net, so it is trying to find out
the link-layer (probably ethernet) address. Towards this end, it is
sending out an Address Resolution Protocol (ARP) query.
: 14:36:42.922072 GRIERSON.help.com.970 > EXTERNALWEB.help.com.32783: udp
: 40 (DF)
: 14:36:42.923595 EXTERNALWEB.help.com.32783 > GRIERSON.help.com.970: udp
: 136 (DF)
Grierson and externalweb are doing a small transaction. It's hard to say
what, without more information. If grierson is a unix box, then the
process on its side is probably a system/privileged process, because
binding to ports under 1024 requires privilege. I wonder if this is part
of a longer sequence, because it's more common to see transactions
initiated by non-privileged, high-port client processes and served by
privileged, low-port server processes.
: 14:36:43.051675 arp who-has 192.84.162.2 (Broadcast) tell
: EXTERNALWEB.help.com
Externalweb didn't get an answer to its ARP query, so it sent it again.
Eventually it will time out.
: It seems that I get alot of those.
Is 192.84.162.2 on the same ethernet segment as externalweb? If so, you
need to determine why it's not responding to ARP queries. If not, you
need to reconfigure externalweb to have a better idea of where to find it.
--
Ben
<Just Another System Administrator>
by