Discussion:
ARP responses
m***@yahoo.com
2004-10-13 02:18:39 UTC
Permalink
Hi All,
I am trying to write a small program to implement proxy arp using libnet and libpcap. So far I was able to write arp responses to the wire; but for some reason, my host is not seeing those responses. But I was able to see those packets on the wire using tcpdump though.

Here's what tcpdump shows me:

20:58:27.488240 0:10:a4:8b:9e:c9 ff:ff:ff:ff:ff:ff 0806 42: arp who-has xx.xx.xx.xx tell xx.xx.xx.xx
0001 0800 0604 0001 0010 a48b 9ec9 xxxx
xxxx 0000 0000 0000 xxxx xxxx
20:58:27.488540 0:10:a4:8b:9e:c9 0:10:a4:8b:9e:c9 0806 60: arp reply xx.xx.xx.xx is-at 0:10:a4:8b:9e:c9
0001 0800 0604 0002 0010 a48b 9ec9 xxxx
xxxx 0010 a48b 9ec9 xxxx xxxx 0000 0000
0000 0000 0000 0000 0000 0000 0000
This is how my arp cahce looks like

? (1.1.1.1) at 02:00:6D:2B:C7:E8 [ether] on eth0
? (2.2.2.2) at <incomplete> on eth0

Any advice is greatly appreciated.

Thanks
Mohan

Loading...