抱歉,评论被关闭
如何解决服务器上抓到异常arp包?
机房里,我所能控制的linux服务器(DELL) 都 能抓到异常的arp包
如下:
09:20:35.494783 ARP, Reply 192.168.0.120 is-at 78:2b:cb:05:a5:49 (oui Unknown), length 46 09:20:35.584338 ARP, Reply 192.168.0.120 is-at 78:2b:cb:23:e3:ba (oui Unknown), length 46 09:20:36.301670 ARP, Reply 192.168.0.120 is-at 78:2b:cb:77:c0:f8 (oui Unknown), length 46 09:20:36.639297 ARP, Reply 192.168.0.120 is-at d4:ae:52:6c:9d:5d (oui Unknown), length 46 09:20:37.096449 ARP, Reply 192.168.0.120 is-at 78:2b:cb:05:61:49 (oui Unknown), length 46 09:20:38.272540 ARP, Reply 192.168.0.120 is-at 78:2b:cb:23:e2:0e (oui Unknown), length 46 09:20:45.148552 ARP, Reply 192.168.0.120 is-at 84:2b:2b:68:0c:d5 (oui Unknown), length 46 09:20:47.382978 ARP, Reply 192.168.0.120 is-at 78:2b:cb:07:b7:50 (oui Unknown), length 46 09:20:48.091674 ARP, Reply 192.168.0.120 is-at 78:2b:cb:07:79:c8 (oui Unknown), length 46 09:20:48.711703 ARP, Reply 192.168.0.120 is-at d4:ae:52:6b:f2:cf (oui Unknown), length 46 09:20:48.728161 ARP, Reply 192.168.0.120 is-at d4:ae:52:99:38:80 (oui Unknown), length 46 09:20:49.859992 ARP, Reply 192.168.0.120 is-at d4:ae:52:6b:f0:49 (oui Unknown), length 46 09:20:51.160067 ARP, Reply 192.168.0.120 is-at d4:ae:52:99:34:4c (oui Unknown), length 46 09:20:51.552954 ARP, Reply 192.168.0.120 is-at d4:ae:52:99:3b:a0 (oui Unknown), length 46 09:20:53.281641 ARP, Reply 192.168.0.120 is-at 84:2b:2b:68:9f:1e (oui Unknown), length 46 09:20:53.287338 ARP, Reply 192.168.0.120 is-at d4:ae:52:6c:9e:3e (oui Unknown), length 46 09:20:53.554261 ARP, Reply 192.168.0.120 is-at 78:2b:cb:05:9c:ed (oui Unknown), length 46 09:20:53.708782 ARP, Reply 192.168.0.120 is-at d4:ae:52:6b:ed:39 (oui Unknown), length 46 09:20:53.775425 ARP, Reply 192.168.0.120 is-at 78:2b:cb:23:e2:77 (oui Unknown), length 46 09:20:55.813124 ARP, Reply 192.168.0.120 is-at d4:ae:52:99:38:a4 (oui Unknown), length 46 09:20:58.179471 ARP, Reply 192.168.0.120 is-at 78:2b:cb:23:e2:59 (oui Unknown), length 46 09:20:59.286734 ARP, Reply 192.168.0.120 is-at d4:ae:52:6b:e9:bc (oui Unknown), length 46 09:20:59.811590 ARP, Reply 192.168.0.120 is-at d4:ae:52:64:33:30 (oui Unknown), length 46 09:21:06.253977 ARP, Reply 192.168.0.120 is-at 78:2b:cb:05:a5:49 (oui Unknown), length 46 09:21:06.303565 ARP, Reply 192.168.0.120 is-at 78:2b:cb:23:e3:ba (oui Unknown), length 46 09:21:06.681000 ARP, Reply 192.168.0.120 is-at 78:2b:cb:77:c0:f8 (oui Unknown), length 46 09:21:07.398385 ARP, Reply 192.168.0.120 is-at d4:ae:52:6c:9d:5d (oui Unknown), length 46 09:21:07.896828 ARP, Reply 192.168.0.120 is-at 78:2b:cb:05:61:49 (oui Unknown), length 46 09:21:09.031837 ARP, Reply 192.168.0.120 is-at 78:2b:cb:23:e2:0e (oui Unknown), length 46 09:21:15.907534 ARP, Reply 192.168.0.120 is-at 84:2b:2b:68:0c:d5 (oui Unknown), length 46 09:21:18.142129 ARP, Reply 192.168.0.120 is-at 78:2b:cb:07:b7:50 (oui Unknown), length 46 09:21:18.850935 ARP, Reply 192.168.0.120 is-at 78:2b:cb:07:79:c8 (oui Unknown), length 46 09:21:19.091158 ARP, Reply 192.168.0.120 is-at d4:ae:52:6b:f2:cf (oui Unknown), length 46 09:21:19.447212 ARP, Reply 192.168.0.120 is-at d4:ae:52:99:38:80 (oui Unknown), length 46 09:21:20.239388 ARP, Reply 192.168.0.120 is-at d4:ae:52:6b:f0:49 (oui Unknown), length 46 09:21:21.919213 ARP, Reply 192.168.0.120 is-at d4:ae:52:99:34:4c (oui Unknown), length 46 09:21:22.311989 ARP, Reply 192.168.0.120 is-at d4:ae:52:99:3b:a0 (oui Unknown), length 46 09:21:24.040778 ARP, Reply 192.168.0.120 is-at 84:2b:2b:68:9f:1e (oui Unknown), length 46 09:21:24.046407 ARP, Reply 192.168.0.120 is-at d4:ae:52:6c:9e:3e (oui Unknown), length 46 09:21:24.088734 ARP, Reply 192.168.0.120 is-at d4:ae:52:6b:ed:39 (oui Unknown), length 46 09:21:24.313376 ARP, Reply 192.168.0.120 is-at 78:2b:cb:05:9c:ed (oui Unknown), length 46 09:21:24.493494 ARP, Reply 192.168.0.120 is-at 78:2b:cb:23:e2:77 (oui Unknown), length 46 09:21:26.572149 ARP, Reply 192.168.0.120 is-at d4:ae:52:99:38:a4 (oui Unknown), length 46
开始感觉这个ip并不陌生,因为在装系统的时候,进去会出现这个ip
网上查了一下资料,说是dell服务器远程管理IP影响的
解决办法:只能进系统的时候关掉
ctrl+E
进入IPMI Server Management Configuration
设置 IPMI Over LAN 为 On
上面的解决办法并未验证,根据dell服务器远程控制配置,来关闭!
有空再找机子来验证一下!
参考资料:http://blog.c1gstudio.com/archives/1373
http://bbs.linuxtone.org/thread-16065-1-1.html
本文出自 “凹凸曼” 博客,请务必保留此出处http://www.apoyl.com/?p=1384
Tag: arp
目前盖楼