Re: [Nolug] Strange messages

"J. Kent Busbee, Jr." <buz@penwel.com> writes:

No big deal. I get the same thing on my OBSD firewall -- albeit for a
different subnet. It appears Cox has implemented some sort of round-robin
failover on their CMTS's. I never got to do that while I was at Charter
so I don't know the exact details but I do know that Cisco 10000-class CMTS
boxes have some failover capabilities.

> I’ve been getting the following messages on my FreeBSD firewall to my Cox home connection.
> Should I be concerned? The one that occurs at least hourly is the change in MAC address.
> Yet, my internet access seems to work just fine.
>
> Feb 25 23:00:00 busbee newsyslog[4963]: logfile turned over
>
> Feb 25 23:19:41 busbee /kernel: arp: 68.96.34.1 moved from 00:04:28:24:18:54 to
> 00:04:28:24:18:a8 on rl1
>
> Feb 25 23:20:46 busbee /kernel: arp: 68.96.34.1 moved from 00:04:28:24:18:a8 to
> 00:04:28:24:18:54 on rl1
>
> Feb 26 00:18:41 busbee /kernel: arp: 68.96.34.1 moved from 00:04:28:24:18:54 to
> 00:04:28:24:18:a8 on rl1
>
> Feb 26 00:20:15 busbee /kernel: arp: 68.96.34.1 moved from 00:04:28:24:18:a8 to
> 00:04:28:24:18:54 on rl1
>
> Feb 26 00:41:36 busbee dhclient: New Network Number: 68.96.34.0
>
> Feb 26 00:41:36 busbee dhclient: New Broadcast Address: 68.96.35.255
>
> Feb 26 01:40:42 busbee /kernel: arp: 68.96.34.1 moved from 00:04:28:24:18:54 to
> 00:04:28:24:18:a8 on rl1
>
> Feb 26 01:40:42 busbee /kernel: arp: 68.96.34.1 moved from 00:04:28:24:18:a8 to
> 00:04:28:24:18:54 on rl1
>
> Feb 26 02:39:42 busbee /kernel: arp: 68.96.34.1 moved from 00:04:28:24:18:54 to
> 00:04:28:24:18:a8 on rl1
>
> Feb 26 02:40:10 busbee /kernel: arp: 68.96.34.1 moved from 00:04:28:24:18:a8 to
> 00:04:28:24:18:54 on rl1
>
> Feb 26 03:38:43 busbee /kernel: arp: 68.96.34.1 moved from 00:04:28:24:18:54 to
> 00:04:28:24:18:a8 on rl1
>
> Feb 26 03:39:26 busbee /kernel: arp: 68.96.34.1 moved from 00:04:28:24:18:a8 to
> 00:04:28:24:18:54 on rl1
>
> Feb 26 04:37:43 busbee /kernel: arp: 68.96.34.1 moved from 00:04:28:24:18:54 to
> 00:04:28:24:18:a8 on rl1
>
> Feb 26 04:37:44 busbee /kernel: arp: 68.96.34.1 moved from 00:04:28:24:18:a8 to
> 00:04:28:24:18:54 on rl1
>
> Feb 26 05:36:43 busbee /kernel: arp: 68.96.34.1 moved from 00:04:28:24:18:54 to
> 00:04:28:24:18:a8 on rl1
>
> Feb 26 05:36:44 busbee /kernel: arp: 68.96.34.1 moved from 00:04:28:24:18:a8 to
> 00:04:28:24:18:54 on rl1
>
> Feb 26 06:35:44 busbee /kernel: arp: 68.96.34.1 moved from 00:04:28:24:18:54 to
> 00:04:28:24:18:a8 on rl1
>
> Feb 26 06:35:50 busbee /kernel: arp: 68.96.34.1 moved from 00:04:28:24:18:a8 to
> 00:04:28:24:18:54 on rl1
>
> Feb 26 07:34:44 busbee /kernel: arp: 68.96.34.1 moved from 00:04:28:24:18:54 to
> 00:04:28:24:18:a8 on rl1
>
> Feb 26 07:34:51 busbee /kernel: arp: 68.96.34.1 moved from 00:04:28:24:18:a8 to
> 00:04:28:24:18:54 on rl1
>

-- 
Scott Harney<scotth@scottharney.com>
"...and one script to rule them all."
___________________
Nolug mailing list
nolug@nolug.org