topic Re: How to troubleshoot gratuitous ARP ? in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-troubleshoot-gratuitous-ARP/m-p/167252#M30221 <P>If you have a suspicion G-ARPs are not sent, it is best to snoop them on the receiving end, not on your cluster member.&nbsp;</P> Tue, 10 Jan 2023 12:43:03 GMT _Val_ 2023-01-10T12:43:03Z How to troubleshoot gratuitous ARP ? https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-troubleshoot-gratuitous-ARP/m-p/167245#M30219 <P>Dear CheckMates,</P><P>I need to troubleshoot gratuitous ARP since on router does not get as soon as a cluster failover happend in an activ/passiv cluster without vMAC enabled.</P><P>Is is possible and will this command work?</P><PRE>tcpdump -i bond0.xxxx broadcast and arp and arp[6:2] == 2</PRE><P>Or does anyone of you has another usfull command?</P><P>Gateway is running with R81.10 Take 79</P><P>&nbsp;</P><P>BR</P><P>Patrick</P> Tue, 10 Jan 2023 10:40:46 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-troubleshoot-gratuitous-ARP/m-p/167245#M30219 Patrick150781 2023-01-10T10:40:46Z Re: How to troubleshoot gratuitous ARP ? https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-troubleshoot-gratuitous-ARP/m-p/167251#M30220 <P>You can even do tcpdump -i if_name arp...example tcpdump -i eth2 arp</P> <P>Also, cppcap -f "arp" works too.</P> <P>This website my colleague made ages ago is really good reference for multiple vendors:</P> <P><A href="https://tcpdump101.com/#" target="_blank">https://tcpdump101.com/#</A></P> <P>Cheers.</P> Tue, 10 Jan 2023 12:37:20 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-troubleshoot-gratuitous-ARP/m-p/167251#M30220 the_rock 2023-01-10T12:37:20Z Re: How to troubleshoot gratuitous ARP ? https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-troubleshoot-gratuitous-ARP/m-p/167252#M30221 <P>If you have a suspicion G-ARPs are not sent, it is best to snoop them on the receiving end, not on your cluster member.&nbsp;</P> Tue, 10 Jan 2023 12:43:03 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-troubleshoot-gratuitous-ARP/m-p/167252#M30221 _Val_ 2023-01-10T12:43:03Z Re: How to troubleshoot gratuitous ARP ? https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-troubleshoot-gratuitous-ARP/m-p/167253#M30222 <P>The following discussion may also be helpful for you:</P> <P><A href="https://community.checkpoint.com/t5/Security-Gateways/How-to-send-G-ARP-manually/td-p/69895" target="_blank">https://community.checkpoint.com/t5/Security-Gateways/How-to-send-G-ARP-manually/td-p/69895</A></P> Tue, 10 Jan 2023 12:44:21 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/How-to-troubleshoot-gratuitous-ARP/m-p/167253#M30222 Chris_Atkinson 2023-01-10T12:44:21Z