Address Resolution Protocol is a layer 2 networking protocol used for resolving layer 3 addresses (such as IP addresses) into layer 2 addresses (such as Ethernet MACs). It is used by network devices when communicating with devices on the same layer 2 network.
Questions tagged [arp]
421 questions
0
votes
1 answer
Sporadic routing(?) issues
We are running several virtual machines using KVM with libvirtd with a routed network (the host systems routes an extra subnet for the virtual machines). Host and Guest OS is Gentoo (host on amd64, guests on x86). The VMs are multi-homed with an…
ercpe
- 576
- 3
- 15
0
votes
1 answer
Direct server return, ARP problem
I'm trying to implement Direct Server Return scheme for our web cluster and I think i got stuck with some ARP issues. For testing purposes I deployed 2 virtual servers (inside ESXi environment).
Host A: eth0 10.0.0.1/24 (VIP) is our director with…
Paul Rin
- 1
- 1
0
votes
2 answers
Is a low-bandwidth arp-scan potentially disruptive to persistent TCP connections on the same LAN?
First a little background: On the (isolated) /16 LAN in question, we have several devices that keep several persistent TCP connections open between them. The program at each end of these TCP connections sends a "heartbeat" packet to its partner…
Jeremy Friesner
- 1,323
- 1
- 14
- 25
0
votes
3 answers
Is this how ARP works?
A wants to send a datagram to B. A knows B's IP address. However B's MAC address is not in A's ARP table. So A broadcasts an ARP query packet to all machines on the LAN. B recognizes it's IP, so it responds by sending A it's MAC address.
Is this how…
Wintermute
- 375
- 2
- 5
- 12
0
votes
1 answer
ARP request are sent even though windows has an entry in cache (ARP Table)
we have a product which runs on windows XP embedded SP1. We add a fake(does not exists) MAC address for a fake IP in ARP table. When there is a communication happening Windows sends packets to the fake MAC and fakeIP and later we change it to real…
Ratnesh Maurya
- 101
- 1
0
votes
3 answers
Same native and tagged vlan possible on Redhat?
I'm looking at implementing a systems using a number of tagged and a native vlan connected to a server over a a/p bonded interface. The untagged vlan is for physical machine access, the tagged vlans are connected to bridges and then to QEMU VM's…
Chris Phillips
- 254
- 4
- 15
0
votes
3 answers
Ettercap - packet injection / alteration
So I have a proxy setup using squid on port 3128.
I also have ettercap setup.
My main goal is to change data as it flows through my proxy.
Basically, you open up www.something.com using my proxy, it displays "lala", and I want to alter "lala"…
Adrian A.
- 85
- 1
- 2
- 12
0
votes
5 answers
Computers on one subnet can't connect to the internet
I have an issue with my student computers - they can't connect to the internet.
Here's the weird part: I open a command prompt and ping our gateway server, and suddenly everything is fine (at least for a while). I don't know what the ping is doing…
Joel Coel
- 12,932
- 14
- 62
- 100
0
votes
1 answer
CISCO: ARP Poisoning Countermeasures
How can I prevent the Cisco Catalysts 2950/2960/3550/3750 from being vulnerable to ARP Poisoning?
Can this be avoided with the ARP INSPECTION?
Thanks
Andre
- 1,341
- 4
- 19
- 34
0
votes
1 answer
arp result interpretation
So what does the command arp -a do? I've been told it displayed the MAC addresses of all network cards on the computer, but when I ran it, it displayed three MACs for three IPs (192.168.41.1, .6, and .8 (24-bit subnet mask)). I assume the first is…
Richard
0
votes
1 answer
Two NIC's in the same ip segment
What is the best technical solution to solve this?
I have a /24-segment with two NIC's in one Linux Server
(lets call it srv) that have two IP-addresses in this segment.
NIC1 / eth0 / 10.10.1.101 / MAC1
NIC2 / eth1 / 10.10.1.102 / MAC2
The segment…
rubber boots
- 145
- 7
0
votes
3 answers
How to stop my VPS from picking up ARP reqs it is not supposed to?
Machine: Xen-3.0 image running stable Debian Linux 2.6.18, pretty vanilla.
My VPS provider asks me to deal with some trouble my image is causing, namely handling IP addresses it is not supposed to:
The problem is that your server seems
to be…
Charles Stewart
- 650
- 6
- 19
0
votes
0 answers
Martian packet with ARP broadcast traffic
Server nodes keep getting ARP broadcast traffic and becoming martian packets due to assymatric routing. I was known that when strict filtering is enabled with net.ipv4.conf.eth0.rp_filter = 1, the packet gets discarded without any further processing…
user5016380
- 41
- 2
0
votes
0 answers
Redirect Traffic on OVS switch
I have below topology on mininet:
Host1:10.0.0.1/24 mac :aa:00:00:00:00:01
Host2:10.0.0.2/24 mac :aa:00:00:00:00:02
Host3:10.0.0.3/24 mac :aa:00:00:00:00:03
I want to redirect traffic as below:
When host1 ping host 2 the traffic should be redirected…
0
votes
1 answer
MITM attacks inside VPN network?
Is it possible to use any MITM attacks (including ssh-mitm) if I'm connected to a VPN? OpenVPN connects me via tun0 interface with some IP in 10.0.0.0/8 and gateway at some IP 10.0.0.0/8. I know that TUN is third layer, so ARP spoofing prorably…
