Hello,
On Thu, Oct 19, 2006 at 01:00:27AM +0200, Javier Fern?ndez-Sanguino Pe?a wrote:
> ... a Rogue user is sending you gratuitous ARP packets to poison your cache
> for all IPs in the network ...
Please excuse me for going out of the original topic, but there is
one thing I would like to clarif
On 10/20/06, Javier Fernández-Sanguino Peña <[EMAIL PROTECTED]> wrote:
On Thu, Oct 19, 2006 at 11:01:39AM +0800, Lestat V wrote:
> On 10/19/06, Lestat V <[EMAIL PROTECTED]> wrote:
> >On 10/19/06, Javier Fernández-Sanguino Peña <[EMAIL PROTECTED]> wrote:
> >> On Wed, Oct 18, 2006 at 11:09:35AM +08
On 10/20/06, Javier Fernández-Sanguino Peña <[EMAIL PROTECTED]> wrote:
On Thu, Oct 19, 2006 at 07:53:29AM +0800, Lestat V wrote:
No, you arp requests are the "arp who-has YYY tell XXX" where XXX is the one
[...]
Sorry for the misunderstanding.
Yes, but do you *see* ARP replies incoming to you
On Thu, Oct 19, 2006 at 11:01:39AM +0800, Lestat V wrote:
> On 10/19/06, Lestat V <[EMAIL PROTECTED]> wrote:
> >On 10/19/06, Javier Fernández-Sanguino Peña <[EMAIL PROTECTED]> wrote:
> >> On Wed, Oct 18, 2006 at 11:09:35AM +0800, Lestat V wrote:
>
> I tried "/usr/sbin/tcpdump -ei eth0 arp" for a w
On Thu, Oct 19, 2006 at 07:53:29AM +0800, Lestat V wrote:
> I tried using "arp -an -i eth0" plus "arping [MAC]", and results:
> dance:/home/lestat# arp -an -i eth0
> ? (10.100.105.251) at 00:07:84:52:55:3C [ether] on eth0
> ? (10.100.105.252) at 00:07:84:52:55:3D [ether] on eth0
> ? (10.100.105.250
On 10/19/06, Lestat V <[EMAIL PROTECTED]> wrote:
On 10/19/06, Javier Fernández-Sanguino Peña <[EMAIL PROTECTED]> wrote:
> On Wed, Oct 18, 2006 at 11:09:35AM +0800, Lestat V wrote:
I tried "/usr/sbin/tcpdump -ei eth0 arp" for a while and got results
as excerpted as follows: (10.100.105.105 is me
Thanx.
On 10/19/06, Javier Fernández-Sanguino Peña <[EMAIL PROTECTED]> wrote:
On Wed, Oct 18, 2006 at 11:09:35AM +0800, Lestat V wrote:
So, I guess you are saying that if you run 'arp -n' in 'You' and 'Other'
systems in the same VLAN you see this:
Right? How 'peculiar' is that MAC address you a
On Wed, Oct 18, 2006 at 11:09:35AM +0800, Lestat V wrote:
> I encouter an fake MAC address problem:
>
> I found that on ARP table of my computer, all IP addresses in my LAN
> have a same and pecular MAC address. On ARP table of two other
> computers in the same LAN as mine, different IP addresses
Yes this could be perfectly normal.
Are you behind a bridge ?
> -Original Message-
> From: Lestat V [mailto:[EMAIL PROTECTED]
> Sent: 18 October 2006 04:10
> To: debian-security@lists.debian.org
> Subject: help: duplicate MAC address
>
> I encouter an fake MAC address problem:
>
> I fou
martin f krafft <[EMAIL PROTECTED]> writes:
> also sprach Lestat V <[EMAIL PROTECTED]> [2006.10.18.0509 +0200]:
>> Can it be normal? Or what may be going on my computer and the LAN?
>
> Yes, this can happen. I suggest you use the ifupdown pre-up hook to
> change them on each machine.
>
> iface eth
also sprach Lestat V <[EMAIL PROTECTED]> [2006.10.18.1115 +0200]:
> Thanx. I am not quite sure about what you mean. However, the HAddress
> as indicated by the "ifconfig -a" is "00:11:2F:57:9B:6F", which is not
> the one as indicated in the ARP cache in other machine.
in that case you may just hav
Thanx. I am not quite sure about what you mean. However, the HAddress
as indicated by the "ifconfig -a" is "00:11:2F:57:9B:6F", which is not
the one as indicated in the ARP cache in other machine.
On 10/18/06, martin f krafft <[EMAIL PROTECTED]> wrote:
also sprach Lestat V <[EMAIL PROTECTED]> [2
also sprach Lestat V <[EMAIL PROTECTED]> [2006.10.18.0509 +0200]:
> Can it be normal? Or what may be going on my computer and the LAN?
Yes, this can happen. I suggest you use the ifupdown pre-up hook to
change them on each machine.
iface eth0 inet dhcp
pre-up ip link set $IFACE address de:ad:be
13 matches
Mail list logo
