4 devices using the same mac address in the ARP Table. Explanation

Please tell me why four devices connected to the router shares the same mac address was shown on the arp table? I know this has to do with the firewall and owner of listening devices, but why all using the same mac address instead of him? I'm trying to understand this scenerio. Please advice.

Internet 16x.1x.2x.1x - 0050.5486.5f60 ARPA Ethernet0/0

Internet 16x.1x.2x.1x 1 0040.1017.2d64 ARPA Ethernet0/0

Internet 16x.1x.2x.1x 11 0040.1017.2d64 ARPA Ethernet0/0

Internet 16x.1x.2x.2x 216 0040.1017.2d64 ARPA Ethernet0/0

Internet 16x.1x.2x.2x 88 0040.1017.2d64 ARPA Ethernet0/0

Internet 16x.1x.2x.2x 166 0040.1017.2d64 ARPA Ethernet0/0

No problem at all... I guess she gave us the opportunity to learn that a little on the proxy-ARP and the potential for problems, it can cause.

Paresh

Tags: Cisco Security

Similar Questions

  • exit show me the same MAC address twice

    Hi all

    and easy for sure. When I run the interfaces see the G0/1 command on switch, why the output shows me the same MAC address twice?

    the address is 00d0.58c0.4519 (bia 00d0.58c0.4519)

    I know, BIA is burned in address and is located on the ROM, but what is the idea behind this?

    EDIT: also would like to ask, why a router maintains an arp entry for its own interface, it seems that this is not the case on for example a Windows laptop...

    Best regards

    Adam

    Adam,

    Some interfaces allow you to configure user-defined MAC address:

     R1#show int f0/0 | i bia Hardware is AmdFE, address is cc00.0fac.0000 (bia cc00.0fac.0000) R1#conf t Enter configuration commands, one per line. End with CNTL/Z. R1(config)#int f0/0 R1(config-if)#mac-address 0200.0000.0001 R1(config-if)#do show int f0/0 | i bia Hardware is AmdFE, address is 0200.0000.0001 (bia cc00.0fac.0000)

    HTH

    Rolf

  • same mac address lan on different esx hosts

    Hi, I have a unit of vmware (firewall) who take control of the NICs mac address, if I move this to another Esx VM, all configuration fell, because the lan mac address is different from the first Esx.

    Is there a way to put the same mac address on two or more Esx host in the network adapters.

    I tryied to set the mac address on the settings of the VM manually from the second Esx, but the first part is blocked.

    In this case, I suggest to make a manual copy.

    Or remove the inventory on the destination hosts, set the vmx file (to restore the old MAC address), then add back to the inventory.

    André

  • Using the external table error

    Hi all

    This is the first time I use the external table for loading the data.

    I did these steps

    In the D:\sqlloade folder, I have my text file containing data example.txt

    I ran these queries

    CREATE OR REPLACE DIRECTORY  ext_tab_data AS 'D:\sqlloader';
    
    

    Directory created

    CREATE TABLE fxops.t_ext (
    t number
    )
    ORGANIZATION EXTERNAL (
      TYPE ORACLE_LOADER
      DEFAULT DIRECTORY ext_tab_data
      ACCESS PARAMETERS (
        RECORDS DELIMITED BY NEWLINE
        FIELDS TERMINATED BY ','
        MISSING FIELD VALUES ARE NULL
        (
         t number
        )
      )
      LOCATION ('sample.txt')
    )
    PARALLEL 5
    REJECT LIMIT UNLIMITED;
    
    

    create table

    When I tried to create a view on that table, he throws an error

    CREATE OR REPLACE VIEW fxops.t_view  AS
      SELECT *
      FROM   fxops.t_ext;
    
    SQL Error: ORA-06564: object EXT_TAB_DATA does not exist
    06564. 00000 -  "object %s does not exist"
    *Cause:    The named object could not be found.  Either it does not exist
               or you do not have permission to access it.
    *Action:   Create the object or get permission to access it.
    
    

    Sign in, and then run this:

    Select HOST_NAME from v$ instance;

    is this the same hostname that you are connected?

    Kind regards

    Harry

  • Remove the entry from the ARP table

    I need to create a program to remove an entry in the ARP table in Windows 7 with LabVIEW and TestStand.  The test that I develop contacts ESA via Ethernet.  Each HAD has the same IP address at the beginning but different MAC addresses.  I note that there may be long delays in test is running when you try to connect and remove the previous entry in the ARP table seems to help.  But now I have to do it manually through the command line.  The command 'arp d' requires elevated privileges.  I had a hard time getting LabVIEW to raise the system exec.  Does anyone have an ideas? Is there a .NET access to the ARP table?

    Thank you

    Paul

    I'll try to look into ARP sync settings setting in Windows.

    We have suffered from various problems of connection-performance TCP a few years ago and our solution was to change the default number of TCP sockets and delays (we knew port exhaustion). The tweeks eliminated most of our problems, no changes to code LV/TS not required.

    I tried to find info on ARP parameters for Windows 7, but it seems that there is much less info available that ther is for XP.

    Key words of the most common registry for older versions of Windows have been 'ArpCacheLife' and 'ArpCacheMinReferencedLife.

    EDIT:

    These parameters were apparently kidnapped in Vista. I found this on the site of $ M; they can apply to later versions, as well as M$ is a request for change to the management of the ARP...

    http://support.Microsoft.com/kb/949589

  • SG500 showing the same MAC address on more than one port?

    My ISP has been help me solve a problem that we had with an interaction between our SG500 battery on HP customer premises equipment.

    I have the stack of SG500 divided into two VIRTUAL LANs. 8-port VLAN11 and the rest on VLAN1. Both are of VLAN native, not marked so they will carry only the traffic for their own VLAN with no mixing. I also route between these VLANs on the stack.

    VLAN11 switch ip: 10.76.20.20

    IP switch VLAN1: 10.1.1.1

    I took a port for each VLAN and plugged into the HP PSI switch, where he adapt VLANS separated which then connect to a remote data center through an MPLS.

    Here's the question: the SG500 seems to have mac address base on two HP PSI switch ports. This disrupts the HP switch, and I end up having packets to fall into a black hole. This is the output of the switch from HP showing mac based battery SG500 goods between ports in seconds:

    HP # display the address mac 8843e1-af7085

    Status and counters - Address-Table - 8843e1-af7085

    MAC address: 8843e1-af7085

    Located on the Port: 15

    HP # display the address mac 8843e1-af7085

    Status and counters - Address-Table - 8843e1-af7085

    MAC address: 8843e1-af7085
    Located on the Port: 11

    Any idea what's going on here? It's as if the SG500 uses the MAC even for both its IP addresses.

    Thank you!

    Hi Dani, the only MAC address announced by SX300/500 series should be the Mac system if you show on the SX500 mac address table, you should see the MAC even for both VLAN. I don't know why, is to confuse the HP switch unless it does not correctly between switches vlan tag.

    -Tom
    Please mark replied messages useful

  • Can I use Firefox to connect to an active web device using only its IP address?

    I can type the IP address in the URL instead of a URL field?

    Yes, you can use the IP or the resolved domain name. An address using IP directly would bypass the DNS problems. The device would need a static IP instead of a dynamic IP address, however, or you need to update from time to time.

  • Connect to the console of vCenter device using the roots

    It is possible to connect to the console of the vCenter (5.5) device uses root?  And I don't mean via SSH; I mean in vCenter open the 'Virtual keyboard' unit vCenter VM and then login?  When I type in the root, it asks me not even a password - it just says: invalid connection.  Curiously, if I type in administrator would it ask for a password but I don't know what is this password (I was just with administrator to test to see if other accounts acted the same way).

    Thank you

    NK

    Too funny - I had to reboot the device last night in a different purpose and when I tried to login this morning to get the screenshots, it worked.   Chalked it up to gremlims/Ghost in the machine.

    Thank you

    NK

  • VMware Studio device uses no fixed ip address

    I built a machine of Ubuntu using Studio 2.6. I adjustments obtaining the FVO to accept the IP provided by a user address.
    The camera only has an ethernet adapter.  I chose prompt for all properties of networking that he picks up a DHCP address. If I choose ask the IP address or use DHCP (which is what I would like to). I will give me only the provided DHCP address.
    If I isolate the data center of the DHCP server, it will not come with any ip address. I reconnect DHCP and the device pick up a DHCP address.
    Basically, if I configure values for the network, the values are not defined and the TIME will come only an address from the DHCP server.
    I do not think that there is a problem with ovfenv because he is responsible and provides correction information

    ovfenv.JPG

    Also if I look, and the OVF of the virtual machine environment settings, I have the correct values I entered.

    ovf properties.JPG

    It seems that it should be simple enough, but I must be missing something somewhere.

    I saw nothing on the blogs that match my exact problem.   Any help would be appreciated.

    Hello

    If you have installed VAMI, you can check by running version vamicli [-device |-studio]

    I think/opt/vmware/share/vami/vami_ovf_process - setnetwork running must accomplish what you're looking for. This is assuming that your ovf properties are set as you show here with a set ip, subnet mask and gateway.

    If you try this please do so with a new, expanded device containing important information.

    You will have to do this with root privileges.

    Thank you

  • Same MAC address LAN different segment, different ESX, different groupings? questions?

    Hello

    I have a question reguardning assign the same address MAC 2 mV.

    A quick overview of our environment is:

    1 vCenter

    2 different groups

    Virtual machines are not in the same LAN segment.

    We have cloned a VM to group A to group B. The license for the application is linked to the MAC address of the virtual machine. However, with a few changes to the .vmx file we have changed the

    static ethernetX.addresstype

    ethernetX.address for the MAC, we wanted to

    added the ethernet.checkMACAddress = "false".

    While the two virtual machines have the same MAC, VMS are production and VM B are development.

    It works very well and we can turn on the virtual machine in Group B and both A and B works very well, the application works fine in the two clusters. BUT here's my question.

    vCenter keeps track of MAC addresses and VM b it gives an error stating that "the static method address MAC attributed to VM B, is in conflict with the VM A MAC» Then can there be a problem for us? We can be right now two virtual machines are in place and working well just. And the application also works very well at the time of the cluster. The only one complaining about this is vCenter.

    Someone has the right answer for me?

    BR

    Henrik

    Since you have no problems of network just ignore this warning.

    ---

    VCP MCSA, MCTS Hyper-V, VMware vExpert 2009, 3/4

    http://blog.vadmin.ru

  • an alarm can be set to control an external device using the digital output?

    My employer is considering buying a 6210 DAQ and SignalExpress (we currently use a branded DATAQ device).

    Looks like I can use the alarm function SignalExpress to define a logic high or low line, controlling a SSR to stop a pump (a non-critical application).

    Can I use SignalExpress in this way?

    I know LabView can do, but there is no way that the company appears for him.

    Thank you.

    Hi Jack, this is Paul with Applications Engineering at National Instruments.

    SignalExpress supports the functionality you want.

    «Once you have configured your signal to acquire you can go to "Save Options" > "Alarms" and then set the alarm conditions, and then choose your Action to alarm as «Defining the digital line»»

    I've attached a screenshot of the example of this configuration.

    Note here that I put it down when the alarm turned on.  You there are other options, including a rocker.

    Let us know if you have any other questions!

    Paul

  • Cannot add new device using the USB port

    Cannot add new device through usb ports, the cable is peripheral poering, not listed is not in the menu

    Thread merged:

    try to use the scanner to photo but can not add new device via USB, cable powers the device, but the device not listed is not in the menu

    Hello

    1. do you get an error message when you add a new device?

    2. What do you mean by "the cable is peripheral poering"?

    3 are. what menu you referring?

    4. is it the problem persists with a particular device?

    5. were there any changes (hardware or software) to the computer before the show?

    Reply with answers to help you in a better way.

    Click on the below mentioned link to get an idea on how to ask for suggestions in this forum.

    Suggestions for a question on the help forums

  • Unknown Apple IP addresses in the ARP table?

    Given that I added two Apple TV 4 to my network via ethernet and using IP addresses static, I notice several entries in an IP scan for unknown IP addresses that seem to be related ATV equipment.

    I am at a loss for why this is happening or how to fix it.  I unplugged my ATV gear and restarted the routers and switches, emptied of the ARP protocol on mac I use to scan ports, but registrations continue to show.

    It is an example of what I see.  Appreciate any ideas or suggestions.

    Name: Inactive device, device Type: other, IP: 192.168.1.176, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.102, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.104, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.105, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.113, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.126, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.128, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.129, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.137, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.143, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.145, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.146, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.147, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.148, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.156, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.157, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.158, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.160, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.162, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.175, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.177, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.178, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.179, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.181, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.182, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.183, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.184, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.185, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.186, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.187, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.188, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.189, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.190, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.191, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.192, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.193, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.194, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.195, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.196, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.197, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.198, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.199, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.168, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Name: Inactive device, device Type: other, IP: 192.168.1.169, MAC: UNKNOWN, IPv6: UNKNOWN, DNS: UNKNOWN, manufacturer: Apple, Inc.., last seen: 24/04/2016-09:49:52

    Strange. We'll see.

    You have configured your DHCP router in order to exclude the static address of the DHCP pool? Why use static addresses, anyway? Are the addresses reported in DHCP pool?

    You have configured the static addresses in the ATV? As well as the correct values for the gateway and the server names?

    These are obvious questions, but need to check.

    They are all the last time at the same time, which I suppose is the time of the scan. It would simply mean their leases have not expired. What is your DHCP lease?

    Do you use the wifi for devices that come and go? This could explain some distribution of values of intellectual property.

    Do you use AirPlay to a device on a wifi network for an ATV on another network? In other words, you need bluetooth to make AirPlay work?

  • How to create the new table by using the pertioned table

    Hello
    I use a partitioned table, now I want CPDR a new table with the same structure of my existing partitioned table.
    so can I use this syntax

    create the table abc_new as
    Select * from my_partitioned_table
    where 1 = 2;

    If I use this syntax, he would do the same my existing partitioned table structure?

    and

    When
    We use a syntax such as

    create the table abc_new as
    Select * from my_partitioned_table
    where 1 = 2;

    so he would also make the indexing on the new table if old table exists? If this isn't the case, then how can we create this indexing too at the time of execution of this syntax?


    regards

    N °

    Although the command would create a new table with the same column names and data types, it is NOT a partitioned table. You must explicitly specify the PARTITION BY clause and definitions of Partition when creating the table.

    Similarly, index definitions are not automatically copied. You must explicitly run the CREATE INDEX statements (which you can generate source using DBMS_METADATA. GET_DDL or by using any other tools/utilities).

    (However, if you use Export-Import - for example import to another schema, or to another database, it would create a table partitoned bearing the same name and with the same index definitions).

    Hemant K Collette

  • The group using the external table name

    Hello

    I used the following link and I was able to create groups based on these steps. However I have a question, in the initialization block SQL SQL has a variable name,
    Select "GROUP «groupname...»» ». How is the presentation layer knows that the name of the variable 'GROUP' is attributed to membership in a group? Thank you.

    http://obieeblog.WordPress.com/2009/06/18/OBIEE-security-enforcement-%E2%80%93-external-database-table-authorization/

    Griup is a session of the system variable. As soon as you crush with block values init, same value will be overwritten at each location.

    Kind regards
    Sandeep

Maybe you are looking for