We had two servers (sun sparc) detected broadcasting at 0.0.0.0. On doing a diagnostic we found the following: 2009 Aug 17 11:26:03 MultiNICBAgent[3322]
 MAC dst=ff:ff:ff:ff:ff:ff src=0:15:17:75:51:56 proto=0800
The diagnostics for the dTrace output from sun is: 2009 Aug 17 11:26:03 MultiNICBAgent[3322] <-- process name and pid.
 MAC dst=ff:ff:ff:ff:ff:ff src=0:15:17:75:51:56 proto=0800 <-- src mac is e1000g0's
 IP dst=6.0.65.181 src=246.176.0.0 proto=00 <-- it seems failing to trace IP part due to wrong offset..
They claim that it may be some issue with symantec.
Oops. seems that the stupid thing carried over the style information. The same fixed:
We had two servers (sun sparc) detected broadcasting at 0.0.0.0. On doing a diagnostic we found the following:
2009 Aug 17 11:26:03 MultiNICBAgent[3322]
 MAC dst=ff:ff:ff:ff:ff:ff src=0:15:17:75:51:56 proto=0800
2009 Aug 17 11:26:03 MultiNICBAgent[3322]
 MAC dst=ff:ff:ff:ff:ff:ff src=0:21:28:5:84:ee proto=0800
2009 Aug 17 11:26:13 MultiNICBAgent[3322]
 MAC dst=ff:ff:ff:ff:ff:ff src=0:15:17:75:51:56 proto=0800
2009 Aug 17 11:26:13 MultiNICBAgent[3322]
 MAC dst=ff:ff:ff:ff:ff:ff src=0:21:28:5:84:ee proto=0800
2009 Aug 17 11:26:23 MultiNICBAgent[3322]
 MAC dst=ff:ff:ff:ff:ff:ff src=0:15:17:75:51:56 proto=0800
The diagnostics for the dTrace output from sun is:
CPUÂ Â Â Â IDÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â FUNCTION:NAME
 16 37046             dld_tx_single:entry
2009 Aug 17 11:26:03 MultiNICBAgent[3322] <-- process name and pid.
 MAC dst=ff:ff:ff:ff:ff:ff src=0:15:17:75:51:56 proto=0800 <-- src mac is e1000g0's
 IP dst=6.0.65.181 src=246.176.0.0 proto=00 <-- it seems failing to trace IP part due to wrong offset..
2009 Aug 17 11:26:03 MultiNICBAgent[3322] <-- process name and pid.
 MAC dst=ff:ff:ff:ff:ff:ff src=0:15:17:75:51:56 proto=0800 <-- src mac is e1000g0's
 IP dst=6.0.65.181 src=246.176.0.0 proto=00 <-- it seems failing to trace IP part due to wrong offset..
They claim that it may be some issue with symantec.
a) I can see you are not using IPMP for failover however mpathd command is set, in case you have setup IPMP or you intend to use IPMP for failover, please insert a line in config "UseMpathd = 1", for e.g below
b) Thinking on why multinic agent would braodcast ? I get an answer that it needs to ping some IP address to understand whether the resource is alive or not, however this purpose should be solved by "DefaultRouter" attribute, but somehow I guess putting one more attribute "NetworkHosts" & putting a IP in NetworkHosts atribute which is always alive would be good point to start...