topic RE: Meaning of ARP operation code 3072 in ExtremeSwitching (EOS)

Meaning of ARP operation code 3072

cbuchenau — Mon, 22 Jan 2018 19:42:00 GMT

On an S-Series chassis we receive the following log messages:

RtrArpProc[1]Received ARP packet with Operation code: 3072

All I can find is the RFC stating that 3072 is in the unassigned range....

Does anyone have an idea what that message could mean?

RE: Meaning of ARP operation code 3072

Daniel_Coughlin — Tue, 23 Jan 2018 04:57:00 GMT

The message is reporting that option code 3072 was set in an arp the device received.
I have not been able to find any information on this option other than what you have pointed out. What is the end device that sent the arp? That may give us a clue.

RE: Meaning of ARP operation code 3072

cbuchenau — Tue, 23 Jan 2018 13:33:00 GMT

That's a good question, will need to run a packet sniffer to find out...

RE: Meaning of ARP operation code 3072

Jason_Parker — Tue, 23 Jan 2018 23:01:00 GMT

I have checked our database and there is no related bug on this message so Dan is correct, chasing down that end station would really help.

RE: Meaning of ARP operation code 3072

cbuchenau — Tue, 23 Jan 2018 23:07:00 GMT

Thanks guys. As this is a Layer2 switch, my guess is that the ARP messages are coming from the default-gw for the VLAN where the switches are inside for management. Which is a Fortinet Firewall. But we will run a packet sniffer as soon as we find a free minute... will keep you updated.