> # more /proc/net/arp
which is fine for assigned IP addresses, because machines will respond to
"who has <their-IP>" ARP requests...
because i am trying to track down spoofed IPs, none of the machines are
going to respond to a "who has <spoofed-IP>" ARP request...
what i was after was something that would be able to capture the ethernet
frame of the offending packets and report the MAC address in the frames...
later
marty
"I can't buy what I want because it's free. Can't be what they want
because I'm me." - Corduroy, Pearl Jam
--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug
