Today I observed some strange behavior with an IP address on our network. Our main switch was reporting that it's MAC address kept changing, a couple times every minute. We pinged the IP repeatedly and cleared the ARP cache and with every clearing of the ARP we saw a new MAC entry.
We tracked it for some time and it seemed to be cycling through the MAC addresses of our wireless AP's. Every couple of seconds it would take the MAC of a different AP, and just keep going.
Has anyone seen behavior like this before? We tried everything we could think of try and track down the culprit but so far we have had no luck. How would one go about setting something like this up? And how can we track down it's origin?