About dburns

Did you happen to capture the GradARP packets on the passive device as it became active?   https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Capture-ARP-Packets-on-an-Interface/ta-p/55835         ... View more

What version? And are you sure the API is not being updated? The clear command worked for me. You could also add a timeout and send that to all your api know users therefor they would timeout. admin@PA-200> show user ip-user-mapping all IP              Vsys   From    User                             IdleTimeout(s) MaxTimeout(s) --------------- ------ ------- -------------------------------- -------------- ------------- 192.168.254.1   vsys1  XMLAPI  dominic                          Never          Never        Total: 1 users admin@PA-200> clear user-cache all All entries in user cache removed! admin@PA-200> show user ip-user-mapping all IP              Vsys   From    User                             IdleTimeout(s) MaxTimeout(s) --------------- ------ ------- -------------------------------- -------------- ------------- Total: 0 users admin@PA-200> ... View more

pa> show interface <interface> Interface management profile: allow_all   ping: yes  telnet: yes  ssh: yes  http: yes  https: yes    snmp: yes  response-pages: no  userid-service: no ... View more