Quote from: franco on Today at 07:48:43 AMWe're recording the last MAC address for any IPv4 and IPv6 we see. If the MAC changes that's considered a "movement". In some environments this happens very rapidly and thus the service constantly registers the changes.
top -S -m io -o total
last pid: 25126; load averages: 0.49, 0.44, 0.46 up 0+01:26:59 20:11:30
143 processes: 3 running, 138 sleeping, 2 waiting
CPU: 9.4% user, 0.0% nice, 4.7% system, 0.9% interrupt, 84.9% idle
Mem: 1154M Active, 1634M Inact, 1585M Wired, 880M Buf, 7477M Free
Swap: 8192M Total, 8192M Free
PID USERNAME VCSW IVCSW READ WRITE FAULT TOTAL PERCENT COMMAND
34081 hostd 2494 13 0 2496 0 2496 99.96% hostwatch
16 root 500 0 0 1 0 1 0.04% bufdaemon
85376 root 0 0 0 0 0 0 0.00% php-cgi
53184 root 10 1 0 0 0 0 0.00% php
1 root 0 0 0 0 0 0 0.00% init
74881 root 0 0 0 0 0 0 0.00% php-cgi
79105 root 0 0 0 0 0 0 0.00% csh
35073 root 0 0 0 0 0 0 0.00% php-cgi
68801 root 0 0 0 0 0 0 0.00% php-cgi
2 root 33 0 0 0 0 0 0.00% clock
5314 root 2 2 0 0 0 0 0.00% ng_queue
1474 squid 0 0 0 0 0 0 0.00% security_file_certg
fsck_ffs -n /dev/gpt/rootfs
** /dev/gpt/rootfs (NO WRITE)
** SU+J Recovering /dev/gpt/rootfs
USE JOURNAL? no
Skipping journal, falling through to full fsck
** Last Mounted on /mnt
** Root file system
** Phase 1 - Check Blocks and Sizes
** Phase 2 - Check Pathnames
UNALLOCATED I=1122920 OWNER=hostd MODE=100644
SIZE=21032 MTIME=Jan 16 19:04 2026
FILE=/var/db/hostwatch/hosts.db-journal
UNEXPECTED SOFT UPDATE INCONSISTENCY