[lkml]   [2002]   [Feb]   [18]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: ARP timeout value, why 1 minute ?
In article <> you wrote:
> and early version of Linux. But from a certain point, Linux(only?) changed from 20 minutes to one minute. This changes the system configuration to shorten the ARP expiration timer to one minute instead of the default 20 minutes.

> Why was it changed to 1 minute ?

Thei neighbouring subsystem of Linux 2.4 is a bit more "complex" than a simple


It is actually probing hosts on a regularbut random time. Multiple retries are
done until a neighbour is marked as not reachable.

If the kernel sends any payload packet to a host, a neighbour is in delay
state, if the delay timer expires, it will suspect that something is not ok.
It will send an arp request and go into probe state.

This has the advantage, that as long as the system is up and used, the entry
will never be expired, and as soon as it fails to respond, it will marked dead
quickly. This will also affect all queued packets and all routes, so it can
recover from an unreachable router. It is also not spamming the network with
unneeded unicast or multicast arp requests, because normal payload ip packets
are accounted.

If you are curious what is going on try "/sbin/ip -s neigh"

The times for an entry show "last used"/"last confirmed"/"last updated"


To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
More majordomo info at
Please read the FAQ at

 \ /
  Last update: 2005-03-22 13:24    [W:0.032 / U:38.160 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site