Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 17 Mar 2008 16:49:23 +1300
From:      "Brent Jones" <brent.jones@otago.ac.nz>
To:        "Modulok" <modulok@gmail.com>, <freebsd-questions@freebsd.org>
Subject:   RE: ARP(4) spoofing?
Message-ID:  <31AE442CCBC1094ABC40CE85B0149F06523974@MAIL1.registry.otago.ac.nz>
In-Reply-To: <64c038660803162036x661ae5fbgdf2d00f0dcc7d163@mail.gmail.com>
References:  <64c038660803162036x661ae5fbgdf2d00f0dcc7d163@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> -----Original Message-----
> From: owner-freebsd-questions@freebsd.org=20
> [mailto:owner-freebsd-questions@freebsd.org] On Behalf Of Modulok
> Sent: Monday, 17 March 2008 4:36 p.m.
> To: freebsd-questions@freebsd.org
> Subject: ARP(4) spoofing?
>=20
> Would this be ARP(4) spoofing, or is it just me? How would I=20
> confirm it?
>=20
> arp: 192.168.1.1 is on lo0 but got reply from xx:xx:xx:xx:xx:xx on em1
> last message repeated 18 times
> This is on a FreeBSD router, em1 is Internet-facing. 192.168.1.1 (em0)
> is LAN facing and permanent entry in the arp cache. This happens
> constantly and is slowly filling my log files.
>=20
> Thoughts? Suggestions?
> -Modulok-

What does an "ifconfig -a" on your machine show?  It looks like you've
configured your loopback interface to also have 192.168.1.1

Cheers,
Brent



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?31AE442CCBC1094ABC40CE85B0149F06523974>