LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   replying to arp request (https://www.linuxquestions.org/questions/linux-newbie-8/replying-to-arp-request-886235/)

sumeet inani 06-14-2011 06:39 AM

replying to arp request
 
I read this 'tcpdump' command
Then i ran
sudo tcpdump | grep -i who-has
I got
Code:

16:41:25.681254 ARP, Request who-has 192.168.8.69 tell 192.168.8.52, length 46
16:41:26.765560 ARP, Request who-has 192.168.8.69 tell 192.168.8.52, length 46
16:41:27.681763 ARP, Request who-has 192.168.8.69 tell 192.168.8.52, length 46
16:41:28.681871 ARP, Request who-has 192.168.8.69 tell 192.168.8.52, length 46
16:41:29.766230 ARP, Request who-has 192.168.8.69 tell 192.168.8.52, length 46
16:41:30.682232 ARP, Request who-has 192.168.8.69 tell 192.168.8.52, length 46
16:41:30.915527 ARP, Request who-has NPIC34B13.local tell 192.168.8.88, length 46
16:41:31.517844 ARP, Request who-has 192.168.8.1 tell richa-PC.local, length 46
16:41:31.544858 ARP, Request who-has 192.168.8.1 tell richa-PC.local, length 46
16:41:31.682545 ARP, Request who-has 192.168.8.69 tell 192.168.8.52, length 46
16:41:32.766858 ARP, Request who-has 192.168.8.69 tell 192.168.8.52, length 46
16:41:33.681912 ARP, Request who-has 192.168.8.69 tell 192.168.8.52, length 46
16:41:34.552141 ARP, Request who-has lxuser-desktop.local tell 192.168.8.121, length 46
16:41:34.682166 ARP, Request who-has 192.168.8.69 tell 192.168.8.52, length 46
16:41:35.767599 ARP, Request who-has 192.168.8.69 tell 192.168.8.52, length 46
16:41:36.682509 ARP, Request who-has 192.168.8.69 tell 192.168.8.52, length 46
16:41:37.682774 ARP, Request who-has 192.168.8.69 tell 192.168.8.52, length 46
16:41:38.768172 ARP, Request who-has 192.168.8.69 tell 192.168.8.52, length 46
16:41:39.683260 ARP, Request who-has 192.168.8.69 tell 192.168.8.52, length 46

Can I generate acknowledge to 192.168.8.52 posing as 192.168.8.69 ?

flakblas 06-14-2011 06:49 AM

Check out a program called Ettercap.

sumeet inani 01-08-2012 09:44 AM

tip for all
 
I read a little about subnet mask , network & host address at http://www.networkclue.com/routing/t...ing-masks.aspx

Then I read http://openmaniak.com/ettercap.php
This is fascinating .
Tinkering with ARP is fun , provided you do not have malicious intent & do it on your local network after informing .


All times are GMT -5. The time now is 10:38 PM.