Crash on 24.7.11_2: "cannot forward" and "arp: moved"

[slowhawkeclipse]

My router (Protectli VP2410) stopped routing traffic this morning and was unresponsive. It wouldn't negotiate a link to my desktop or the WAP, so I couldn't load the webgui or ssh into it. When I powercycled it, it came up and is working fine. When I looked in `/var/log/dmesg.today`, I found a lot of messages that were along the lines of:

cannot forward src fe80:xxxx:xxxx:..., dst 2600:xxxx:xxxx:..., nxt 6, rcvif igb0, outif igb1

and

arp: 192.168.31.34 moved from e8:ea:6a:25:30:12 to 60:e3:2b:4b:ec:e5 on igb0
arp: 192.168.31.34 moved from 60:e3:2b:4b:ec:e5 to e8:ea:6a:25:30:12 on igb0
arp: 192.168.31.34 moved from e8:ea:6a:25:30:12 to 60:e3:2b:4b:ec:e5 on igb0
arp: 192.168.31.34 moved from 60:e3:2b:4b:ec:e5 to e8:ea:6a:25:30:12 on igb0
arp: 192.168.31.34 moved from e8:ea:6a:25:30:12 to 60:e3:2b:4b:ec:e5 on igb0
arp: 192.168.31.34 moved from 60:e3:2b:4b:ec:e5 to e8:ea:6a:25:30:12 on igb0

then:

Waiting (max 60 seconds) for system process `vnlru' to stop... done
Waiting (max 60 seconds) for system process `syncer' to stop...
Syncing disks, vnodes remaining... 0 0 0 0 done
All buffers synced.
Uptime: 13d22h52m7s
uhub0: detached
---<<BOOT>>---

Am I looking in the right place to track down the cause of the crash? Can anyone point me the right direction?

Thanks,
Ben

[Patrick M. Hausen]

The ARP messages are normal. If you have e.g. Apple devices with some advanced sort of WoL and proxy ARP this happens all the time. Like an Apple TV or Airport base station.

The second set of lines is simply a controlled shutdown of the system. So somehow it was shut down but not powered off it seems.

[slowhawkeclipse]

Gotcha, good to know, thanks! Any suggestions how I can figure out why it shut down?