Project

General

Profile

Bug #9424

arpwatch package logs CARP MAC address changes

Added by Art Manion 8 months ago. Updated 6 months ago.

Status:
New
Priority:
Low
Assignee:
-
Category:
arpwatch
Target version:
-
Start date:
03/22/2019
Due date:
% Done:

0%

Estimated time:
Affected Version:
2.4.4_2
Affected Architecture:
amd64

Description

arpwatch on interfaces using CARP logs ethernet mismatch errors like these:

Mar 18 14:47:24 x.x.x.x arpwatch: ethernet mismatch y.y.y.y 0:1:2:3:4:5 (0:0:5e:0:1:b)

FreeBSD arpwatch has a -v option to ignore/not log CARP MAC address changes. But the patch that added -v functionality forgot to allow the -v option to the arpwatch command.

https://svnweb.freebsd.org/ports?view=revision&revision=420995

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=235415

Here are patches to enable -v, also enable -d (debug), and modify the pfSense arpwatch service XML and PHP to provide a checkbox for the -v option.

https://github.com/pfsense/FreeBSD-ports/pull/630

Tested and working on a 2.4.4-p2 system.

Accepting these changes would make arpwatch out of sync with upstream.

Also available in: Atom PDF