Re: [Packetfence-users] locationlog has NULL mac address entries

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 454-5900

Josh,

This behaviour is normal with linkup/linkdown/mac-notification traps.
When a device plugs in a switchport, PF puts the port in the mac-detection VLAN since it does not know at that moment 
what is the mac address of the device.
Everytime PF changes a switchport VLAN it adds an entry in locationlog. In this case the switchport is put in mac 
detection VLAN with no mac address. So you see entries with no mac address.
This is just the normal behaviour.
:)

Regis Balzard
rba...@in...  ::  +1.514.447.4918 (x110)  ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (www.scalableogo.org) and PacketFence (www.packetfence.org)

Josh Ward wrote:
> Greetings PF community:
> 
> I'm trying to track down some odd behavior in our PF installation and I
> noticed some entries like this in my locationlog table:
> | NULL | 10.161.198.23 | 10015 | 666  | 2009-11-02 10:54:09 | 2009-11-03
> 09:53:43 |
> | NULL | 10.161.186.17 | 10003 | 666  | 2009-11-02 10:47:17 | 2009-11-03
> 12:33:27 |
> | NULL | 10.161.190.8  | 10041 | 555  | 2009-11-02 10:49:59 | 2009-11-03
> 06:51:10 |
> | NULL | 10.161.192.9  | 10042 | 555  | 2009-11-02 10:51:01 | 2009-11-03
> 08:54:29 |
> 
> A null mac address?  That doesn't seem right.  Vlan 666 is our mac
> detection vlan and nothing should have a locationlog entry there?
> 
> When I grep through the snmptrap logs (which is where this data comes
> from, afaik) I don't see any entries from when the entry was opened:
> [jward@nac]$ grep "10.161.190.8" snmptrapd.log | grep "10041"
> 2009-11-03|14:51:09|UDP: [127.0.0.1]:36578|10.161.190.8|BEGIN TYPE 6 END
> TYPE BEGIN SUBTYPE .0 END SUBTYPE BEGIN VARIABLEBINDINGS
> .1.3.6.1.6.3.1.1.4.1.0 = OID:
> .1.3.6.1.4.1.29464.1.1|.1.3.6.1.2.1.2.2.1.1.10041 = INTEGER: 10041 END
> VARIABLEBINDINGS
> 
> 
> Has anyone else run in to this?
> 
> -Josh
> 
> --
> Josh Ward <jw...@uo...>
> Network Security Engineer - University of Oregon - Network Services
> PGP Fingerprint: CFB6 62C0 370B AD6D BA33 6034 8FFB 4A49 297F 6A4C
> 
> ------------------------------------------------------------------------------
> Come build with us! The BlackBerry(R) Developer Conference in SF, CA
> is the only developer event you need to attend this year. Jumpstart your
> developing skills, take BlackBerry mobile applications to market and stay 
> ahead of the curve. Join us from November 9 - 12, 2009. Register now!
> http://p.sf.net/sfu/devconference
> _______________________________________________
> Packetfence-users mailing list
> Pac...@li...
> https://lists.sourceforge.net/lists/listinfo/packetfence-users