dunigan@THDSUN.EPM.ORNL.GOV (Tom Dunigan 576-2522) (10/19/88)
15:35:59.87 8:0:89:d0:1:1 ff:ff:ff:ff:ff:ff 0806 60: arp who-has 0.0.0.144 tell 0.0.0.6 15:35:59.91 8:0:89:d0:23:25 ff:ff:ff:ff:ff:ff 0806 60: arp who-has 0.0.0.243 tell 0.0.0.144 the preceding messages are from Kinetics/Macintosh/Appletalk boxes perhaps attempting to communicate their presence and possibly appletalk number, usually seen when Kinetics box is booted 16:24:31.52 2:60:8c:6:35:71 ff:ff:ff:ff:ff:ff 0806 60: arp who-has 128.183.255.255 tell vlsi2.gsfc.nasa.gov 16:46:24.74 8:0:20:1:90:df ff:ff:ff:ff:ff:ff 0806 60: arp who-has 128.183.255.255 tell ltpsun.gsfc.nasa.gov the above usually arise from a mixture of machines with different broadcast masks (e.g., in your case, some machines are running with old mask convention of 128.183.0.0 rather than present practice of 128.183.255.255),so when one of the older mask machines sees a UDP broadcast (e.g. whod) from a machine under the newer mask, it fires off the ARP