From nobody Wed Mar  1 21:32:10 2023
X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4PRnWP2XqJz3vNNG
	for <freebsd-net@mlmmj.nyi.freebsd.org>; Wed,  1 Mar 2023 21:32:17 +0000 (UTC)
	(envelope-from michael.tuexen@lurchi.franken.de)
Received: from drew.franken.de (mail-n.franken.de [193.175.24.27])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(Client CN "*.franken.de", Issuer "Sectigo RSA Domain Validation Secure Server CA" (verified OK))
	by mx1.freebsd.org (Postfix) with ESMTPS id 4PRnWN72L1z3GTT;
	Wed,  1 Mar 2023 21:32:16 +0000 (UTC)
	(envelope-from michael.tuexen@lurchi.franken.de)
Authentication-Results: mx1.freebsd.org;
	none
Received: from smtpclient.apple (unknown [IPv6:2a02:8109:1140:c3d:c64:cf31:7eab:fd78])
	(Authenticated sender: lurchi)
	by drew.franken.de (Postfix) with ESMTPSA id AE4FF7213B547;
	Wed,  1 Mar 2023 22:32:11 +0100 (CET)
Content-Type: text/plain;
	charset=us-ascii
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-net
List-Help: <mailto:freebsd-net+help@freebsd.org>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Subscribe: <mailto:freebsd-net+subscribe@freebsd.org>
List-Unsubscribe: <mailto:freebsd-net+unsubscribe@freebsd.org>
Sender: owner-freebsd-net@freebsd.org
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.400.51.1.1\))
Subject: Re: BPF to filter/mod ARP
From: Michael Tuexen <michael.tuexen@lurchi.franken.de>
In-Reply-To: <PH0PR06MB7639AAFFF7F38C9AD6211ECA86AD9@PH0PR06MB7639.namprd06.prod.outlook.com>
Date: Wed, 1 Mar 2023 22:32:10 +0100
Cc: "Scheffenegger, Richard" <rscheff@freebsd.org>,
 "freebsd-net@freebsd.org" <freebsd-net@freebsd.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <F406F3CA-7E41-416F-B64B-EE76DB7F45E7@lurchi.franken.de>
References: <b076d803-bc77-f3e2-8452-e85e3ac296b6@freebsd.org>
 <02B65D42-5097-421A-B951-C947C5DBA465@lurchi.franken.de>
 <PH0PR06MB7639AAFFF7F38C9AD6211ECA86AD9@PH0PR06MB7639.namprd06.prod.outlook.com>
To: "Scheffenegger, Richard" <Richard.Scheffenegger@netapp.com>
X-Mailer: Apple Mail (2.3731.400.51.1.1)
X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00
	autolearn=disabled version=3.4.1
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on mail-n.franken.de
X-Rspamd-Queue-Id: 4PRnWN72L1z3GTT
X-Spamd-Bar: ----
X-Spamd-Result: default: False [-4.00 / 15.00];
	REPLY(-4.00)[];
	ASN(0.00)[asn:680, ipnet:193.174.0.0/15, country:DE]
X-Rspamd-Pre-Result: action=no action;
	module=replies;
	Message is reply to one we originated
X-ThisMailContainsUnwantedMimeParts: N

> On 1. Mar 2023, at 22:10, Scheffenegger, Richard =
<Richard.Scheffenegger@netapp.com> wrote:
>=20
>>> On 1. Mar 2023, at 21:33, Scheffenegger, Richard =
<rscheff@freebsd.org> wrote:
>>>=20
>>> Hi group,
>>>=20
>>> Maybe someone can help me with this question - as I am usually only =
looking at L4 and the top side of L3 ;)
>>=20
>>> In order to validate a peculiar switches behavior, I want to adjust =
some fields in gracious arps sent out by an interface, after a new IP is =
assigned or changed.
>=20
>> Wouldn't scapy allow you to do this kind of testing?
>=20
> Unfortunately not - I don't want to forge another packet, I want to =
make sure only the specific one is being sent, with the standard GARP =
retransmissions and so on.
Can't you test what you want to test by generating all the required =
packets from scapy? ARP is a pretty simple protocol...

Best regards
Michael
>=20
> Richard
>=20