Date: Sun, 16 Mar 2008 21:36:18 -0600 From: Modulok <modulok@gmail.com> To: freebsd-questions@freebsd.org Subject: ARP(4) spoofing? Message-ID: <64c038660803162036x661ae5fbgdf2d00f0dcc7d163@mail.gmail.com>
next in thread | raw e-mail | index | archive | help
Would this be ARP(4) spoofing, or is it just me? How would I confirm it? arp: 192.168.1.1 is on lo0 but got reply from xx:xx:xx:xx:xx:xx on em1 last message repeated 18 times last message repeated 19 times last message repeated 9 times last message repeated 10 times last message repeated 19 times last message repeated 24 times last message repeated 24 times last message repeated 24 times last message repeated 34 times last message repeated 23 times last message repeated 23 times last message repeated 26 times last message repeated 26 times last message repeated 26 times last message repeated 25 times last message repeated 25 times last message repeated 27 times last message repeated 30 times last message repeated 27 times last message repeated 27 times last message repeated 30 times last message repeated 10 times ... This is on a FreeBSD router, em1 is Internet-facing. 192.168.1.1 (em0) is LAN facing and permanent entry in the arp cache. This happens constantly and is slowly filling my log files. Thoughts? Suggestions? -Modulok-
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?64c038660803162036x661ae5fbgdf2d00f0dcc7d163>