Topic: arpwatch issues

[morpheus]

arpwatch reporting bogon 0.0.0.0 frequently. Supposed to be old bug that was fixed. Any ideas?

[Stefano]

can you provide any kind of evidence?

and if you feel that the bug is still open, please reopen it or open a new one, thank you

[morpheus]

Obtained from /var/log/messages using grep:

messages.20170628145753:Jun 28 15:30:50 jjsme001 arpwatch: bogon 0.0.0.0 88:53:2e:1b:a5:3f
messages.20170628145753:Jun 28 15:30:51 jjsme001 arpwatch: bogon 0.0.0.0 88:53:2e:1b:a5:3f
messages.20170628145753:Jun 28 15:30:53 jjsme001 arpwatch: bogon 0.0.0.0 88:53:2e:1b:a5:3f
messages.20170628145753:Jun 28 15:32:40 jjsme001 arpwatch: bogon 0.0.0.0 88:53:2e:13:2b:cb
messages.20170628145753:Jun 28 15:32:40 jjsme001 arpwatch: bogon 0.0.0.0 88:53:2e:13:2b:cb
messages.20170628145753:Jun 28 15:32:41 jjsme001 arpwatch: bogon 0.0.0.0 88:53:2e:13:2b:cb
messages.20170628145753:Jun 28 15:32:46 jjsme001 arpwatch: bogon 0.0.0.0 88:53:2e:13:2b:cb
messages.20170628145753:Jun 28 15:32:47 jjsme001 arpwatch: bogon 0.0.0.0 88:53:2e:13:2b:cb
messages.20170628145753:Jun 28 15:32:48 jjsme001 arpwatch: bogon 0.0.0.0 88:53:2e:13:2b:cb
messages.20170628145753:Jun 28 15:38:59 jjsme001 arpwatch: bogon 0.0.0.0 88:53:2e:13:2b:cb
messages.20170628145753:Jun 28 15:38:59 jjsme001 arpwatch: bogon 0.0.0.0 88:53:2e:13:2b:cb
messages.20170628145753:Jun 28 15:39:00 jjsme001 arpwatch: bogon 0.0.0.0 88:53:2e:13:2b:cb
messages.20170628145753:Jun 28 15:42:48 jjsme001 arpwatch: bogon 0.0.0.0 c8:e0:eb:40:bc:87
messages.20170628145753:Jun 28 15:42:48 jjsme001 arpwatch: bogon 0.0.0.0 c8:e0:eb:40:bc:87
messages.20170628145753:Jun 28 15:42:48 jjsme001 arpwatch: bogon 0.0.0.0 c8:e0:eb:40:bc:87
messages.20170628145753:Jun 28 15:44:19 jjsme001 arpwatch: bogon 0.0.0.0 c8:e0:eb:40:bc:87
messages.20170628145753:Jun 28 15:44:19 jjsme001 arpwatch: bogon 0.0.0.0 c8:e0:eb:40:bc:87
messages.20170628145753:Jun 28 15:44:20 jjsme001 arpwatch: bogon 0.0.0.0 c8:e0:eb:40:bc:87
messages.20170628145753:Jun 28 15:44:20 jjsme001 arpwatch: bogon 169.254.201.95 c8:e0:eb:40:bc:87
messages.20170628145753:Jun 28 15:44:20 jjsme001 arpwatch: bogon 169.254.201.95 c8:e0:eb:40:bc:87
messages.20170628145753:Jun 28 15:44:21 jjsme001 arpwatch: bogon 169.254.201.95 c8:e0:eb:40:bc:87
messages.20170628145753:Jun 28 15:44:41 jjsme001 arpwatch: bogon 169.254.201.95 c8:e0:eb:40:bc:87
messages.20170628145753:Jun 28 15:45:11 jjsme001 arpwatch: bogon 169.254.201.95 c8:e0:eb:40:bc:87
messages.20170628145753:Jun 28 15:45:42 jjsme001 arpwatch: bogon 0.0.0.0 c8:e0:eb:40:bc:87
messages.20170628145753:Jun 28 15:45:43 jjsme001 arpwatch: bogon 0.0.0.0 c8:e0:eb:40:bc:87
messages.20170628145753:Jun 28 15:45:43 jjsme001 arpwatch: bogon 0.0.0.0 c8:e0:eb:40:bc:87
                                                                                           

[Stefano]

Supposed to be old bug that was fixed.

I guess you're talking about an arpwatch's bug..

in other platforms there's the -z flag to ignore the bogon entries.. this flag is not available on centos

AFAICT there's nothing we can do here

in any case, please post here a link to the "bug" you're referring to, thank you