[Snort-users] Kernel complaint about MAC being seen on multiple interfaces

Doug White dwhite at ...1486...
Wed Apr 4 23:35:42 EDT 2001

On Wed, 4 Apr 2001, Tom Sevy wrote:

> Syslog is showing that a given MAC is being seen by three NICs.  This MAC
> belongs to an Alteon Web Switch.  It is the hard IP/MAC and not the Virtual
> IP/MAC.  Is it safe to ignore this?  Of is there anything that can be
> configured in the kernel to ignore this scenario?

This is probably because you have all the NICs plugged into the same VLAN,
which is a no-no.  If you want to trunk span ports, you might try to find
the 'fec' driver, which does Fast Etherchannel.

Doug White                    |  FreeBSD: The Power to Serve
dwhite at ...1486...     |  www.FreeBSD.org

More information about the Snort-users mailing list