Meaning of ARP operation code 3072
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎01-22-2018 11:42 AM
On an S-Series chassis we receive the following log messages:
RtrArpProc[1]Received ARP packet with Operation code: 3072
All I can find is the RFC stating that 3072 is in the unassigned range....
Does anyone have an idea what that message could mean?
RtrArpProc[1]Received ARP packet with Operation code: 3072
All I can find is the RFC stating that 3072 is in the unassigned range....
Does anyone have an idea what that message could mean?
4 REPLIES 4
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎01-23-2018 03:07 PM
Thanks guys. As this is a Layer2 switch, my guess is that the ARP messages are coming from the default-gw for the VLAN where the switches are inside for management. Which is a Fortinet Firewall. But we will run a packet sniffer as soon as we find a free minute... will keep you updated.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎01-23-2018 03:01 PM
I have checked our database and there is no related bug on this message so Dan is correct, chasing down that end station would really help.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎01-23-2018 05:33 AM
That's a good question, will need to run a packet sniffer to find out...
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎01-22-2018 08:57 PM
The message is reporting that option code 3072 was set in an arp the device received.
I have not been able to find any information on this option other than what you have pointed out. What is the end device that sent the arp? That may give us a clue.
I have not been able to find any information on this option other than what you have pointed out. What is the end device that sent the arp? That may give us a clue.
