da, asa este, am dat tcpdump -e in timpul unui arping, si am vazut reply-uri de la macul meu catre alte macuri din retea, exact la intervalele respective de timp raportate de arping
ciudat ca arping nu verifica pachetele de reply sa fie primite pe interfata respectiva, nu trimise ----- Original Message ----- From: Matei Conovici To: Romanian Linux Users Group Sent: Thursday, March 16, 2006 2:52 PM Subject: Re: [rlug] arp problems > eth1 Link encap:Ethernet HWaddr 00:0F:20:93:1D:AC > inet addr:192.168.1.1 Bcast:192.168.7.255 Mask:255.255.248.0 > Cand dau un arping -i eth1 192.168.1.1, primesc reply cu propriul meu > mac, dupa un timp intre 1 - 20 de secunde > server:~# arping -i eth1 192.168.1.1 > ARPING 192.168.1.1 > 42 bytes from 00:0f:20:93:1d:ac (192.168.1.1): index=0 time=1.023 sec > Reteaua eth1 e mare, de aprox 1400 calculatoare. > Care sa fie problema ? > IP si MAC spoofing ? bucle in retea pe layer 2 ? Ce aude arping sunt de fapt raspunsurile masinii tale la ARP requests venite din retea. Matei _______________________________________________ RLUG mailing list [email protected] http://lists.lug.ro/mailman/listinfo/rlug _______________________________________________ RLUG mailing list [email protected] http://lists.lug.ro/mailman/listinfo/rlug
