Date: Mon, 17 Mar 2008 16:49:23 +1300 From: "Brent Jones" <brent.jones@otago.ac.nz> To: "Modulok" <modulok@gmail.com>, <freebsd-questions@freebsd.org> Subject: RE: ARP(4) spoofing? Message-ID: <31AE442CCBC1094ABC40CE85B0149F06523974@MAIL1.registry.otago.ac.nz> In-Reply-To: <64c038660803162036x661ae5fbgdf2d00f0dcc7d163@mail.gmail.com> References: <64c038660803162036x661ae5fbgdf2d00f0dcc7d163@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
> -----Original Message----- > From: owner-freebsd-questions@freebsd.org=20 > [mailto:owner-freebsd-questions@freebsd.org] On Behalf Of Modulok > Sent: Monday, 17 March 2008 4:36 p.m. > To: freebsd-questions@freebsd.org > Subject: ARP(4) spoofing? >=20 > Would this be ARP(4) spoofing, or is it just me? How would I=20 > confirm it? >=20 > arp: 192.168.1.1 is on lo0 but got reply from xx:xx:xx:xx:xx:xx on em1 > last message repeated 18 times > This is on a FreeBSD router, em1 is Internet-facing. 192.168.1.1 (em0) > is LAN facing and permanent entry in the arp cache. This happens > constantly and is slowly filling my log files. >=20 > Thoughts? Suggestions? > -Modulok- What does an "ifconfig -a" on your machine show? It looks like you've configured your loopback interface to also have 192.168.1.1 Cheers, Brent
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?31AE442CCBC1094ABC40CE85B0149F06523974>