The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
0answers
26 views

Survive Mac address of client after routing

I am developing an application in which it is very important that I can know the mac address of the client hitting the server. Clients are connected to wifi router (W). Multiple wifi routers (W) are ...
1
vote
0answers
51 views

How to prevent responding to arp scan requests from outside (except the router) in ubuntu?

How do I prevent my computer from responding to arp scans in my network? A solution using iptables or something similar is very welcome. The network interface is wlan0. Some malicious users are ...
0
votes
1answer
74 views

Sudo cron job using arp-scan gives empty output

I made a script called hello.sh and it contains the following: #!/bin/bash printf "$( arp-scan --interface=eth0 --localnet )\n" printf "test\n" after making it executable (chmod o+x) and running ...
3
votes
1answer
62 views

“legal” ARP poisoning by machine aggregating 2 NICs crashes us

I'm really not sure if that title makes any sense so apologies for that, but strange things are afoot, threats are being made and we need to sort this problem out; The situation: Our device (a ...
1
vote
1answer
65 views

is there a tool/daemon that automatically fills /etc/ethers in the background to have a proper wake on lan hostname:mac database when needed?

is there a tool/daemon available that automatically fills /etc/ethers in the background with the proper hostname:mac pairs to have a up to date database when needed with for example wake on lan (wol) ?...
1
vote
0answers
30 views

no arp entries for vnet

I have multiple kvm hypervisors (HV) which runs bunch of virtual machines (VM). Every HV has br0 and every VM is attached to it with its vnet interface. I noticed that one HV at arp -a shows me 2 ...
3
votes
0answers
100 views

Linux does not proxy-arp for me, despite the documentation suggesting that it does

I am working on a PDP-10 emulator (see https://github.com/Rhialto/klh10 ). The operating system installed inside it may want to communicate with the outside world via IPv4 (which was just gaining use ...
0
votes
1answer
69 views

ARP Spoofing in Data Center

I have a dedicated root server. I noticed strange connections from 255.255.255.255 in iftop. Because of that i tried to investigate it. I runned the following command: tcpdump -i eth0 ether ...
0
votes
0answers
77 views

ARP 'ethers' file structure: pub and temp flags

What is the structure of the ARP ethers file and how do the pub and temp flags work in this context? Normally one would do 00:1b:da:4a:ea:66 192.168.1.1 but what if i want to specify the iface and ...
0
votes
1answer
54 views

Recover a net device, I don't know IP-address, how to get arp?

I have to recover a HP ILO3. It doesn't take a correct IP-address because it is misconfigured and get 127.0.0.1 I have no serial cable to connect to serial port. Other forums suggested that I change ...
0
votes
0answers
24 views

how to receive arp packets using nfqueu

I have added rule in nftables which will filter ARP packets. I am sending packet in queue but I am not able receive these packets in our application but using same application I can receive IP packet. ...
0
votes
1answer
418 views

arp-scan shows a machine, but I can't ping it

I have been facing a particularly anomalous network issue. For a particular test, I set a Class A IP on my Windows Machine and tried using arp-scan and ping separately. Here are my Windows settings : ...
1
vote
0answers
61 views

Counter MAC spoofing

I use a public wifi. (connect with id/password on an open network) The network is unstable (download stream 500ko/s then drop 0ko/s and stream stop, if a click a later in the stream it's working ...
2
votes
1answer
71 views

Unable to receive ARP requests. Think it's a buggy driver. How to fix?

I have this problem with my laptop running Debian Jessie. I cannot gain any kind of network visibility on it from devices in the same network. I can't ARP the laptop, but the strangest thing is that ...
2
votes
1answer
42 views

Alternative of ArpRetryCount in CentOS

ArpRetryCount Implemented by Microsoft and the following is its descritption : Determines how many times TCP sends an Address Request Packet for its own address when the service is installed. ...
2
votes
1answer
718 views

Get MAC address of a directly connected device

Given a Linux server with an ethernet card, another device say an unconfigured router is connected with a patch lead (or an ethernet lead cabled in a different way if needed). They're both powered ...
-1
votes
1answer
43 views

Arping to google.com fails

I am trying to follow the instructions here, https://wiki.archlinux.org/index.php/Netconsole to set up netconsole in ubuntu machine. This uses, arping command which is non-responsive when i run it in ...
4
votes
2answers
2k views

Using Python and Scapy to sniff for ARP on Pi

I'm trying to use a Raspberry Pi to find ARP requests from a specific wireless device on my network. It's one of those Amazon dash buttons. Someone used this code to listen to when the dash connects ...
0
votes
0answers
191 views

Wifi Hotspot dnsmasq no DHCP ACK

I am creating a Wifi hotspot with hostapd and providing DHCP/DNS through dnsmasq. When a client connects to the Wifi hotspot it is subsequently unable to obtain an IP address through DHCP. The ...
0
votes
2answers
78 views

routing problem - arp

I have a computer that should connect two networks: 192.168.0.x and 192.168.1.x 192.168.0.x is reachable through interface tun3 while 192.168.1.x is reachable through interface virbr1. It seems ...
1
vote
1answer
153 views

How can I use arptables to limit the number of outgoing ARP requests a second?

End goal: Make a script that will limit the number of outgoing ARP requests in a second using arptables. This is to have the ability to not trip the ARP-limiting feature on Cisco devices. I want to ...
3
votes
2answers
445 views

What is stopping our UDP packets (how does it know the route is down)?

We have a server (camera) sending RTSP video packets via UDP. At a customer site it travels over several hops, one of which may be an unreliable WiFi link that drops the odd packet or five. Usually ...
5
votes
2answers
4k views

Linux does not reply to ARP request messages if requested IP address is associated with another (disabled) interface

I have a PC(kernel 3.2.0-23-generic) which has 192.168.1.2/24 configured to eth0 interface and also uses 192.168.1.1 and 192.168.1.2 addresses for tun0 interface: root@T42:~# ip addr show 1: lo: <...
4
votes
1answer
48 views

Monitoring ARP Poisoning

How to monitor ARP poisoning? These few days my internal website that can be accessed locally has weird image replacing every images on the site for few seconds (it got back to normal after ...
4
votes
0answers
116 views

Publishing an ARP entry

I'm experimenting with a spoofed IP connection, as described in section 7 of this article (IP SPOOFING with BSD RAW SOCKETS INTERFACE). Indeed, when a SYN is sent with no regard for ARP, there's no ...
0
votes
2answers
353 views

Unable to connect to certain IP address, but able to connect to other IP in same subnet

I'm running a 14.04.2 LTS ubuntu box in a DMZ with IP of 10.10.30.35 and I have the following network mystery. I'm trying to connect to another unix box outside the DMZ but in our internal network at ...
0
votes
1answer
49 views

Is there a way to switch interface only by interface name?

I am currently working on how to switch network interface in Linux environment. And i am experimenting on switching network interface by switching default gateway, for example switch to wlan0 when ...
5
votes
2answers
11k views

Clear the arp cache on linux, really

Both: sudo ip -s -s neigh flush all And: sudo arp -d 192.168.0.102 Instead of clearing the arp cache they seem to just invalidate entries (they will appear as incomplete). Even after some ...
1
vote
0answers
163 views

Redirect all ARP traffic from eth0 to eth1

I would like to redirect ARP traffic, but I'm struggling with arptables and ebtables. I have 2 interfaces: eth0 10.10.10.25 eth1 10.10.10.20 Both in 10.10.10.0/24 I want to redirect the ARP ...
2
votes
0answers
72 views

Automate a gratuitous ARP every x seconds

There may be another issue here, so any other questions or comments are welcome. I have a CentOS 6.6 VM running under VirtualBox. It is connected to a GNS3 topology using a UDPTunnel. Everything ...
0
votes
1answer
51 views

When using the spoofed IP option with arping no replies are returned

Host IP: 10.0.0.21 Spoofed IP: 10.0.0.112 Live IP: 10.0.0.138 When I normally run arping like: arping -c 1 -I wlan0 10.0.0.138 I receive a reply. However when I spoof the IP using a machine on ...
0
votes
1answer
357 views

How can I block outgoing ARP traffic?

My server keeps sending ARP requests and my provider is not happy with this. To find out the reason I would like to block all outgoing arp requests (so that my provider doesn't block my server again) ...
1
vote
0answers
61 views

Wireless server only allows a single client

I have a BeagleBone Black running Debian configured as an access point using hostapd and udhcpd. A node based HTTP server accepts request on port 80. The device is not connected to any wired network. ...
3
votes
0answers
4k views

Unable to start network, <IP> is already in use for device eth0, but its not

A wierd issue after we migrated some of our servers to a new DC. We assigned new IPs to all the machines and all the servers are working fine except one. It is not picking up the new IP address and ...
1
vote
1answer
3k views

Network interface not registring ARP response

I have a server with two NIC and it's running Ubuntu Server 14.04. The first one is the interface "p3p1" and it's connected to the subnet 192.168.1.0/24 with the IP 192.168.1.100. The second one is ...
1
vote
2answers
381 views

arp (where're my network devices?)

On linux there's arp command: arp -n Address HWtype HWaddress Flags Mask Iface 192.168.1.100 ether 00:55:d1:c5:f8:1b C eth0 ...
1
vote
0answers
70 views

Is arp periodically called to check connectivity?

Do most of linux implementations periodically make arp requests to check connectivity? I am trying to migrate an ubuntu virtual machine and, after migration, it just loses network connectivity.
1
vote
0answers
41 views

Prerouting issue

I have three hosts: A, B and C. Let's say host A is continuously communicating with host C (e.g. poll - response). Now, I spoof both ARP tables of host and A and C with host B and want to block ...
5
votes
1answer
522 views

ARP request with wrong IP address

I have a strange problem with a Linux router. The setup is like this: host1 === Linux router === host2 a.b.c.d --- a.b.c.e/g.h.i.j --- g.i.h.k Every five minutes host1 tries to reach host2. ...
1
vote
3answers
5k views

How to check if ARP is enabled or not

I have enabled the arp support on my dell based server running linux on it. I wanted to check that if arptables are enabled or not. Could anyone tell me how do I check the same? Is it enough to run ...
1
vote
3answers
1k views

Different ARP results between host and virtual machine

Recently, using VMWare Player, I have configured a Linux virtual machine on a Windows host. I set the network adapter to be a bridged network with the Replicate option checked. The IP address was on ...
1
vote
0answers
1k views

OpenWrt: Find neighbors knowing their MAC address

I have an Open Mesh access point connected to the same router (an Aerohive BR100) than an Axis camera. I would like to automate the discovery of the camera's IP from inside the Open Mesh sensor, ...
4
votes
2answers
15k views

No MAC corresponding to IP in `arp` table: how to troubleshoot?

I've got a Debian 7 linux machine and a TP-link MR3020 router attached to it via ethernet cable at eth0 interface, working in WISP mode meant to make it a client rather than an access point: I also ...
17
votes
3answers
20k views

Can one ping a NIC by MAC

I have an NIC card on a Debian machine somewhere. The machine is turned off, but I need to know whether the NIC card is turned on so that I can send a wake-on-lan magic packet later (from another ...
1
vote
1answer
778 views

What does the route Dest: 123.123.123.123, GW: 0.0.0.0 mean?

I have a route table: Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 123.123.123.123 0.0.0.0 255.255.255.255 UH 0 0 0 ...
0
votes
2answers
51 views

Determine users of nearby machine from CLI

Ok, so at my house I have three computers, and I frequently enjoy using ssh and scp to run commands that allow me to do wonderful things. Primarily transferring downloaded files, and running media ...
1
vote
1answer
221 views

IPs that I bound keep stop responding to ping

So Internic sent over a few cs, and it seems fine on some of them. However, on some I have to run arping -U on to get them up and they only seem to stay up for a short time. They are a /24 properly ...
1
vote
1answer
203 views

Point IP to an application instance

I was just wondering how I go about pointing a static IP address which I have purchased to an application instance on my server, using a different IP from the one I currently have pointing to my main ...
5
votes
2answers
423 views

How to prevent arp-scan from writing to syslog?

I am using arp-scan in a bash script to verify that a host is reachable. I have the script setup as a cron job that runs every minute and /var/log/syslog is filling up with the arp-scan output. I ...
3
votes
1answer
1k views

arping equivalent for IPv6

What is an equivalent for IPv6 of arping -q -c 3 -A -I [device] [ip]? I know, there is not an arp in IPv6 and Neighbor solicitation used instead, but which linux user space tool can send such ...