LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (http://www.linuxquestions.org/questions/linux-networking-3/)
-   -   ARP wants to know... (http://www.linuxquestions.org/questions/linux-networking-3/arp-wants-to-know-770790/)

Thor_2.0 11-22-2009 09:41 AM

ARP wants to know...
 
Hi,

I was answering some questions at Yahoo's when I got a message after submitting my answer, that they couldn't process the request, possibly due to spyware...

Those of you who know me, will understand that I freaked out, so I ran a tcpdump and got request

Quote:

16:30:52.042050 arp who-has 192.168.5.5 tell 192.168.1.1
16:30:52.094023 arp reply 192.168.5.5 is-at [MAC address] (oui Unknown)
16:30:57.042692 arp who-has 192.168.1.1 tell 192.168.1.51
16:30:57.043008 arp reply 192.168.1.1 is-at [MAC address] (oui Unknown)
Strange thing is that both IP addresses are known, and the one with 192.168.1.1 is my router.

I am 99% sure I am not hacked, just help me with the ONE last procent.

Is this a normal "conversation" in a LAN?

Tnx

Thor

repo 11-22-2009 09:48 AM

Quote:

Is this a normal "conversation" in a LAN?
yes
http://www.erg.abdn.ac.uk/users/gorr...pages/arp.html

repo 11-22-2009 09:49 AM

Quote:

I was answering some questions at Yahoo's when I got a message after submitting my answer, that they couldn't process the request, possibly due to spyware...
Seems to me the problem is yahoo.
Can't you get more info?

Thor_2.0 11-22-2009 09:56 AM

Thanks!

I tried to retrace my steps and it did'nt do that anymore...so...yup, it's Yahoo...

Tanks for that one extra procent, I'm 100% sure again, and learned something in the process!

CU!!

Thor


All times are GMT -5. The time now is 10:41 AM.