This can also mean that a machine (usually a server) has a pair of
network cards that are "teamed". I have seen this in logs where there
are Intel NICs in adaptive load balancing teams - the virtual NIC will
get the IP and switch which NIC responds from time to time.

Although these are not Intel NICs - one MAC shows that it is a "Fujitsu
Siemens Computers" and the other is a "PRO-NETS Technology Corporation"
- there could be some form of load balancing.

_________________________________
James W. McKeand


-----Original Message-----
From: sai [mailto:sonicsai at gmail dot com] 
Sent: Wednesday, December 20, 2006 11:31 PM
To: m0n0wall at lists dot m0n0 dot ch
Subject: Re: [m0n0wall] Message in log Monowall.

It means that the ip address  192.168.2.2 in your xl0 subnet used to
be associated with MAC address 00:06:4f:0b:ed:3e and is now associated
with  00:30:05:21:4e:89

You seem to have 2 Lan cards with the same IP address. Maybe it was
assigned by DHCP in which case that is ok, otherwise someone is
messing around, or repairing a PC.

sai

On 12/12/06, RoboK <mono at centrum dot sk> wrote:
> Hi,
> can anybody help me, what does mean this message in the log of the
monowall:
> "/kernel: arp: 192.168.2.2 moved from 00:06:4f:0b:ed:3e to
00:30:05:21:4e:89 on xl0"
> Thanks.
> RoboK.
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch