Re: r288951: ifconfig -alias, arp not removed

From: Alexander V. Chernikov <melifaro_at_freebsd.org>
Date: Fri, 30 Oct 2015 19:03:36 +0300
30.10.2015, 00:57, "Bryan Drewery" <bdrewery_at_FreeBSD.org>:
> On 10/29/2015 9:46 AM, Bryan Drewery wrote:
>> šOn 10/29/15 9:42 AM, Eric van Gyzen wrote:
>>> šOn 10/29/2015 11:25, Bryan Drewery wrote:
>>>> š# ifconfig
>>>> šigb0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
>>>>
>>>> šoptions=403bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,VLAN_HWTSO>
>>>> šššššššššether c8:0a:a9:04:39:78
>>>> šššššššššinet 10.10.0.7 netmask 0xffff0000 broadcast 10.10.255.255
>>>> šššššššššinet 10.10.7.2 netmask 0xffff0000 broadcast 10.10.255.255
>>>> šššššššššinet 10.10.0.9 netmask 0xffff0000 broadcast 10.10.255.255
>>>> šššššššššnd6 options=23<PERFORMNUD,ACCEPT_RTADV,AUTO_LINKLOCAL>
>>>> šššššššššmedia: Ethernet autoselect (1000baseT <full-duplex>)
>>>> šššššššššstatus: active
>>>>
>>>> š# ifconfig igb0 inet 10.10.0.9 -alias
>>>> š# arp -an|grep 10.10.0.9
>>>> š? (10.10.0.9) at c8:0a:a9:04:39:78 on igb0 permanent [ethernet]
>>>> š# arp -d 10.10.0.9
>>>> šarp: writing to routing socket: Operation not permitted
>>>>
>>>> šI swear this is not normal. I'm on an older build as well, r288951.
Well, there were changes on arpscrub procedures in r287789.
(There was one bug fixed in r289501, but I think it is not relevant).
Could you consider trying more recent HEAD and check if this is still reproducible?
I was not able to reproduce that behavior.
>>>
>>> šThat definitely looks abnormal. See what "route get" says. I think
>>> šthat's the error you get when there is a route for that address.
>>
>> š# netstat -rn|grep 10.10.0.9
>> š# route get 10.10.0.9
>> ššššroute to: lapbox
>> šdestination: 10.10.0.0
>> ššššššššmask: 255.255.0.0
>> šššššššššfib: 0
>> šššinterface: igb0
>> šššššššflags: <UP,DONE,PINNED>
>> ššrecvpipe sendpipe ssthresh rtt,msec mtu weight expire
>> šššššššš0 0 0 0 1500 1 0
>> š# route get 5.5.5.5
>> ššššroute to: 5.5.5.5
>> šdestination: default
>> ššššššššmask: default
>> šššššgateway: router.asus.com
>> šššššššššfib: 0
>> šššinterface: igb0
>> šššššššflags: <UP,GATEWAY,DONE,STATIC>
>> ššrecvpipe sendpipe ssthresh rtt,msec mtu weight expire
>> šššššššš0 0 0 0 1500 1 0
>>
>> šFor more context, this current system had 10.10.0.9 added to it. I
>> šstarted up a VM which also started using 10.10.0.9 and managed to "win"
>> šon the local network for owning it. (I don't know arp and this stuff
>> šwell). I then came to this system to remove the alias and the arp entry
>> što allow me to connect from it and have gotten into this situation.
>
> Just saw this in dmesg, which is what I described:
>
> arp: 08:00:27:12:c1:a5 is using my IP address 10.10.0.9 on igb0!
> arp: 08:00:27:12:c1:a5 is using my IP address 10.10.0.9 on igb0!
> arp: 08:00:27:12:c1:a5 attempts to modify permanent entry for 10.10.0.9
> on igb0
> arp: 08:00:27:12:c1:a5 attempts to modify permanent entry for 10.10.0.9
> on igb0
> arp: 08:00:27:12:c1:a5 attempts to modify permanent entry for 10.10.0.9
> on igb0
> arp: 08:00:27:12:c1:a5 attempts to modify permanent entry for 10.10.0.9
> on igb0
>
> --
> Regards,
> Bryan Drewery
Received on Fri Oct 30 2015 - 15:03:51 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:41:00 UTC