fe:ff:ff... arp entry not a reliable way of detecting ec2