Re: Strange new behavior

From: Paul (junk.box3@not.verizon.net)
Date: 12/30/02

  • Next message: Fritz Foetzl: "Re: Various Questions on Dropping SYN Pkts" 
    From: "Paul" <junk.box3@not.verizon.net>
Date: Mon, 30 Dec 2002 00:17:28 GMT

    "Don" <bloody@hell.com> wrote in message
    news:tapu0vsdeaiddnsk51id76at0ab58savmq@4ax.com...
    > On Sun, 29 Dec 2002 21:40:23 +0100, Kasper Dupont <kasperd@daimi.au.dk>
    wrote:
    >
    > >Jem Berkes wrote:
    > >>
    > >> Try viewing the ARP cache. That table lists the link between IP address
    and
    > >> MAC:
    > >> /sbin/arp -nv
    > >
    > >Good idea.
    > >
    > >>
    > >> Is the info shown there accurate? I would check this on both the
    sending
    > >> and receiving hosts for debugging.
    > >
    > >Important point, the problem might be on the sender though apparently
    > >caused by something happening on the receiver.
    > >
    > >> You'll have to know their actual MAC addresses too.
    > >
    > >You can get that as well as the IP addresses by using the ifconfig
    command.
    >
    > Just run an Ethereal session and look at the arp info. This is the easiest
    and
    > simplist way to achieve what has already been said.
    > Don

    Thanks for the quick replies.

    arp -nv revals the correct MAC addresses for the other two machines.

    I also found an error in my config, but correcting it has not helped.

    I ran linuxconf and found that I had entered the IP address of one of my
    other machines as the address for the ethernet adaptor, when actually the
    adaptor gets its address via DHCP. I deleted the incorrect address and saved
    the changes, but still experience the same problem.

    Cannot receive incoming SMTP, and machine will only answer echo requests if
    eth0 is in promiscuous mode.

    PD

    Relevant Pages

    • Re: Any reasons to filter ARP packets?
      ... hundreds and maybe even thousands machines. ... the network device is open for ARP packets since ... Essentially the goal of this attack is similar, ...
      (comp.os.linux.security)
    • Re: Translate MAC address to IP address
      ... >> every packet and counts traffic volume by source and destination MAC. ... with a bunch of gateway machines on it. ... results from the local ARP table. ...
      (freebsd-net)
    • Re: scan for machines in the subnet
      ... the current subnet from one of the machines and get their MAC-adresses. ... Ask the network administrator? ... has intelligence (and you have access to that switch), ... ARP cache, except that the switch should know where everyone is (which ...
      (comp.os.linux.networking)
    • Re: Random packets loss under x86_64 - routing?
      ... > We experience a problem in our amd64 beowulf clusters and could need ... it fails for some machines. ... It only happens with ping, ... entry from the ARP tables. ...
      (Linux-Kernel)
    • Re: Large number of ARP request on network?
      ... all machines for those and any other virus/worm while you are at it. ... > professional and the server is running Win2k Server. ... > Everything seems to be working but the number of ARP request concern me. ... > I always thought that using DHCP and DNS would reduce or eliminate ARP ...
      (microsoft.public.win2000.networking)