交换机一直在刷这些ARP日志:
*Apr 14 08:10:37:010 2022 F12_S7606X ARP/7/ARP_ENTRY: ARP entry status changed: MAC address: dcda-8080-7002, IP address: 10.2.200.50, NO_AGE -> AGING
*Apr 14 08:10:37:012 2022 F12_S7606X ARP/7/ARP_ENTRY: ARP entry status changed: MAC address: dcda-8080-7002, IP address: 10.2.200.50, AGING -> NO_AGE
*Apr 14 08:10:50:010 2022 F12_S7606X ARP/7/ARP_ENTRY: ARP entry status changed: MAC address: a4fa-7671-d2cb, IP address: 10.2.200.53, NO_AGE -> AGING
*Apr 14 08:10:50:012 2022 F12_S7606X ARP/7/ARP_ENTRY: ARP entry status changed: MAC address: a4fa-7671-d2cb, IP address: 10.2.200.53, AGING -> NO_AGE
*Apr 14 08:10:51:010 2022 F12_S7606X ARP/7/ARP_ENTRY: ARP entry status changed: MAC address: 3cf5-cc22-ee0b, IP address: 10.2.200.99, NO_AGE -> AGING
*Apr 14 08:10:51:013 2022 F12_S7606X ARP/7/ARP_ENTRY: ARP entry status changed: MAC address: 3cf5-cc22-ee0b, IP address: 10.2.200.99, AGING -> NO_AGE
*Apr 14 08:11:53:010 2022 F12_S7606X ARP/7/ARP_ENTRY: ARP entry status changed: MAC address: 60db-150e-c1a7, IP address: 10.2.200.65, NO_AGE -> AGING
*Apr 14 08:11:53:013 2022 F12_S7606X ARP/7/ARP_ENTRY: ARP entry status changed: MAC address: 60db-150e-c1a7, IP address: 10.2.200.65, AGING -> NO_AGE
*Apr 14 08:30:35:054 2022 F12_S7606X ARP/7/ARP_ENTRY: ARP entry status changed: MAC address: a4fa-7671-d2cb, IP address: 10.2.200.53, NO_AGE -> AGING
*Apr 14 08:30:35:056 2022 F12_S7606X ARP/7/ARP_ENTRY: ARP entry status changed: MAC address: a4fa-7671-d2cb, IP address: 10.2.200.53, AGING -> NO_AGE
*Apr 14 08:30:36:054 2022 F12_S7606X ARP/7/ARP_ENTRY: ARP entry status changed: MAC address: 3cf5-cc22-ee0b, IP address: 10.2.200.99, NO_AGE -> AGING
*Apr 14 08:30:36:057 2022 F12_S7606X ARP/7/ARP_ENTRY: ARP entry status changed: MAC address: 3cf5-cc22-ee0b, IP address: 10.2.200.99, AGING -> NO_AGE
*Apr 14 08:31:38:054 2022 F12_S7606X ARP/7/ARP_ENTRY: ARP entry status changed: MAC address: 60db-150e-c1a7, IP address: 10.2.200.65, NO_AGE -> AGING
*Apr 14 08:31:38:057 2022 F12_S7606X ARP/7/ARP_ENTRY: ARP entry status changed: MAC address: 60db-150e-c1a7, IP address: 10.2.200.65, AGING -> NO_AGE
这台交换机的IP地址(10.2.200.36)改过后还是会报这些日志,
抓包也抓了,没看到类似ARP攻击的报文
这大概会是啥情况引起的
(0)
不用担心,正常的arp超时或刷新日志而已。
一般交换机日志级别是6,应该是这台设备改过日志级别或者手动打开了arp的诊断信息输出,导致第七级的debugging诊断信息也显示出来了。
建议把日志级别改回6并关闭不用的debugging。
<H3C>undo debugging all
All possible debugging has been turned off.
<H3C>sy
System View: return to User View with Ctrl+Z.
[H3C]info-center source default console level informational
[H3C]info-center source default logbuffer level informational
[H3C]save
(1)
暂无评论
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论