Description of Problem: DHCP sets the source-IP address to 0.0.0.0 on DHCPDISCOVER messages. Same happens when doing "Duplicate address detection mode (DAD)" (see '-D' option at 'man 8 arping'). When arpwatch sees such packages, it creates a 'arpwatch: bogon 0.0.0.0 <mac>' message. Version-Release number of selected component (if applicable): arpwatch-2.1a11-16 How Reproducible: 100% Steps to Reproduce: 1. run arpwatch 2a. on a DHCP enabled machine release the lease and restart the machine, OR 2b. run 'arping -D <IP>' 3. watch /var/log/messages Actual Results: something like. | ... arpwatch: bogon 0.0.0.0 0:2:b3:9a:9f:c4 Expected Results: no such message
Created attachment 86844 [details] Removes bogus 'bogon 0.0.0.0' message
is it fixed with the latest rawhide 3.7.2 version?
Still seeing it with the latest RHL 7.3 errata (arpwatch-2.1a11-17.7.3.2)
please report that upstream...