I've got some schools getting messages like this:
Dec 7 14:09:11 samosx kernel: arp: 169.254.155.115 moved from
00:e0:b0:63:97:52 to 00:0d:93:45:97:a0 on en0
Showing up in the server's system log. I am not responsible for our DHCP system
but it concerns me that some schools are getting 5, 10, or even 15 messages
like this a day while other schools are getting zero messages like this across
all the logs. All our schools get DHCP assignments in the 10.*.*.* range
depending on the specific school they are in so any appearance of 169.254.*.*
seems like a failure of DHCP.
But I need this decoded a bit.
Does this mean that both machines had been on 169.254.155.115 in recent
history, or just that the second hardware address was and the first could have
been a very long time ago, and has been "right" for a long time. In essence I'm
wondering if my problem is twice as big - two machines getting recent DHCP
failures rather than one.
In addition I note that clusters of these messages occur in time, but not
exclusively (for example, sever might be within a second of 14:09 but a few are
scattered at other times as well, unclustered.)
I don't see any messages about going from one IP address to another so there
doesn't seem to be a clear trail going to 169.254.*.* to 10.*.*.* address (and
back, for that matter.)
I've spent hrs going over all 8 system logs per 30 servers and I'm almost done
with this review. It feels like I'm seeing a pattern but need to know more
about the error messages. Would the local machines these hardware addresses are
coming from be a very fruitful avenue to explore (in their system logs)? It
just seems even more daunting to try to review 8 logs for hundreds of machines,
mostly by hand (even though in 10.3 it's ton's easier to review the logs than
in 10.2.) If anyone had a simple way of working through all that I'd certainly
listen but I don't have a syslog server pulling these things in - I'd be
reviewing them by remote control and running Console unless someone has a
better idea.
' ' ' ' ' ' ''"""""""""""'' ' ' ' ' '
Steven Kolins
Alamance-Burlington NC USA, Mac Systems Tech
mailto:email@hiddenhttp://homepage.mac.com/smkolins
Possess a pure, kindly and radiant heart!
They that observe lying vanities forsake their own mercy.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/email@hidden
This email sent to email@hidden
