Hello,
On Thu, Oct 19, 2006 at 01:00:27AM +0200, Javier Fern?ndez-Sanguino Pe?a wrote:
... a Rogue user is sending you gratuitous ARP packets to poison your cache
for all IPs in the network ...
Please excuse me for going out of the original topic, but there is
one thing I would like to clarify
On Thu, Oct 19, 2006 at 07:53:29AM +0800, Lestat V wrote:
I tried using arp -an -i eth0 plus arping [MAC], and results:
dance:/home/lestat# arp -an -i eth0
? (10.100.105.251) at 00:07:84:52:55:3C [ether] on eth0
? (10.100.105.252) at 00:07:84:52:55:3D [ether] on eth0
? (10.100.105.250) at
On Thu, Oct 19, 2006 at 11:01:39AM +0800, Lestat V wrote:
On 10/19/06, Lestat V [EMAIL PROTECTED] wrote:
On 10/19/06, Javier Fernández-Sanguino Peña [EMAIL PROTECTED] wrote:
On Wed, Oct 18, 2006 at 11:09:35AM +0800, Lestat V wrote:
I tried /usr/sbin/tcpdump -ei eth0 arp for a while and got
On 10/20/06, Javier Fernández-Sanguino Peña [EMAIL PROTECTED] wrote:
On Thu, Oct 19, 2006 at 07:53:29AM +0800, Lestat V wrote:
No, you arp requests are the arp who-has YYY tell XXX where XXX is the one
[...]
Sorry for the misunderstanding.
Yes, but do you *see* ARP replies incoming to your
On 10/20/06, Javier Fernández-Sanguino Peña [EMAIL PROTECTED] wrote:
On Thu, Oct 19, 2006 at 11:01:39AM +0800, Lestat V wrote:
On 10/19/06, Lestat V [EMAIL PROTECTED] wrote:
On 10/19/06, Javier Fernández-Sanguino Peña [EMAIL PROTECTED] wrote:
On Wed, Oct 18, 2006 at 11:09:35AM +0800, Lestat
also sprach Lestat V [EMAIL PROTECTED] [2006.10.18.0509 +0200]:
Can it be normal? Or what may be going on my computer and the LAN?
Yes, this can happen. I suggest you use the ifupdown pre-up hook to
change them on each machine.
iface eth0 inet dhcp
pre-up ip link set $IFACE address
Thanx. I am not quite sure about what you mean. However, the HAddress
as indicated by the ifconfig -a is 00:11:2F:57:9B:6F, which is not
the one as indicated in the ARP cache in other machine.
On 10/18/06, martin f krafft [EMAIL PROTECTED] wrote:
also sprach Lestat V [EMAIL PROTECTED]
also sprach Lestat V [EMAIL PROTECTED] [2006.10.18.1115 +0200]:
Thanx. I am not quite sure about what you mean. However, the HAddress
as indicated by the ifconfig -a is 00:11:2F:57:9B:6F, which is not
the one as indicated in the ARP cache in other machine.
in that case you may just have a
martin f krafft [EMAIL PROTECTED] writes:
also sprach Lestat V [EMAIL PROTECTED] [2006.10.18.0509 +0200]:
Can it be normal? Or what may be going on my computer and the LAN?
Yes, this can happen. I suggest you use the ifupdown pre-up hook to
change them on each machine.
iface eth0 inet dhcp
Yes this could be perfectly normal.
Are you behind a bridge ?
-Original Message-
From: Lestat V [mailto:[EMAIL PROTECTED]
Sent: 18 October 2006 04:10
To: debian-security@lists.debian.org
Subject: help: duplicate MAC address
I encouter an fake MAC address problem:
I found that
On Wed, Oct 18, 2006 at 11:09:35AM +0800, Lestat V wrote:
I encouter an fake MAC address problem:
I found that on ARP table of my computer, all IP addresses in my LAN
have a same and pecular MAC address. On ARP table of two other
computers in the same LAN as mine, different IP addresses have
Thanx.
On 10/19/06, Javier Fernández-Sanguino Peña [EMAIL PROTECTED] wrote:
On Wed, Oct 18, 2006 at 11:09:35AM +0800, Lestat V wrote:
So, I guess you are saying that if you run 'arp -n' in 'You' and 'Other'
systems in the same VLAN you see this:
Right? How 'peculiar' is that MAC address you
On 10/19/06, Lestat V [EMAIL PROTECTED] wrote:
On 10/19/06, Javier Fernández-Sanguino Peña [EMAIL PROTECTED] wrote:
On Wed, Oct 18, 2006 at 11:09:35AM +0800, Lestat V wrote:
I tried /usr/sbin/tcpdump -ei eth0 arp for a while and got results
as excerpted as follows: (10.100.105.105 is me)
13 matches
Mail list logo
