Hi,


I was using following steps to test the promisc mode on the network
interface on my system on FreeBSD 6.1.



-          On machine A, I updated the arp table with the a dummy MAC
address (aa:bb:cc:dd:ee:ff) for the remote interface on Machine B.

#arp -s 17.1.1.110 aa:bb:cc:dd:ee:f



-          On Machine B, I enabled promisc mode for the test N/W
interface.

#ifconfig <Interface> promisc



- Started tcpdump on Machine A, for capturing the packets.



-          On Machine A, I ping to the remote Interface of the Machine B

#ping -c2 17.1.1.110

-          Ping went through fine and Tcpdump is displaying both ICMP
request and ICMP reply.



I could understand that machine B receives ICMP request as promisc mode
is enabled. But it  was not suppose to send ICMP reply as the packet was
not intended for this machine (I mean the ICMP REQUEST PACKET contain
some dummy MAC address). It was supposed to be discarded.



After testing the above steps, I could see the ICMP REPLY from MACHINE B
and ICMP REPLY contain original Mac address in the Source MAC address
field in the Ethernet header.



Please let me know whether the above behavior is correct and acceptable.



Thanks,

~Siva






The information contained in this electronic message and any attachments to 
this message are intended for the exclusive use of the addressee(s) and may 
contain proprietary, confidential or privileged information. If you are not the 
intended recipient, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately and destroy all copies of this message and 
any attachments.

WARNING: Computer viruses can be transmitted via email. The recipient should 
check this email and any attachments for the presence of viruses. The company 
accepts no liability for any damage caused by any virus transmitted by this 
email.

www.wipro.com
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to