arp scan

disdro · 10-16-2007, 04:38 AM

hello

I need help about understanding arp scan results.

Code:

[perhos@localhost ~]$ arp-scan --interface=eth0 --localnet
Interface: eth0, datalink type: EN10MB (Ethernet)
Starting arp-scan 1.6 with 256 hosts (http://www.nta-monitor.com/tools/arp-scan/)
192.168.2.1     00:16:xf:06:13:d0       Arcadyan Technology Corporation

1 packets received by filter, 0 packets dropped by kernel
Ending arp-scan 1.6: 256 hosts scanned in 1.305 seconds (196.17 hosts/sec).  1 responded

Is this result bad or good ? How can i find which computer connects to me and its information in details?

acid_kewpie · 10-17-2007, 01:13 PM

the result isn't good or bad... it just "is". it is finding all machines on the local subnet which respond to arp requests, it's facts, no judgement involved.

disdro · 10-18-2007, 01:26 AM

Thank you,

But i don't want a connection to me. I am not on a network i am using adsl. How can i block this connection?

acid_kewpie · 10-18-2007, 04:10 AM

adsl *IS* a network... you can't get online without a network being involved. That "connection" is presumably your adsl router. you prevent that arping, you have no internet. I'd suggest that you generally ignore protocols like arp until you understand the simpler higher level issues like ip addressing and firewalling.