Totusi kernel-ul meu trimite in mod constant arp request catre o anumita adresa din reteaua locala si din cand in cand mai primeste si un reply, desi daca incerc un ping nu raspunde (probabil ca e filtrat). Un exemplu surprins cu iptraf: Wed Feb 25 11:25:56 2004; ARP request for 80.97.81.3; eth1; 132 bytes; from 003084ee9d25 to ffffffffffff Wed Feb 25 11:25:56 2004; ARP reply from 80.97.81.3; eth1; 484 bytes; from 000531f8f5ac to 003084ee9d25 Wed Feb 25 11:26:04 2004; ARP request for 80.97.81.38; eth1; 516 bytes; from 000531f8f5ac to ffffffffffff Wed Feb 25 11:26:07 2004; ARP request for 80.97.81.38; eth1; 580 bytes; from 000531f8f5ac to ffffffffffff
Dupa cum se vede nu e singura masina catre care trimite, dar e singura de la care a primit raspuns. Pe masina mea ruleaza fsecure cu update la zi, iar in lista de procese nu apare nimic suspect. La fel netstat nu arata conexiuni in domeniu. Asadar, de ce apare traficul respectiv? Dragos On Wed, Feb 25, 2004 at 12:04:38PM +0200, Dumitru Ciobarcianu wrote: > On Wed, 2004-02-25 at 10:44 +0100, Dragos MOROIANU wrote: > > Cum pot afla ce proces trimite arp request-uri in retea? > > > Cererile arp nu sunt trimise de un proces in sine (procesele in genere > nu stiu si nu au de ce sa stie de arp) ci de kernel care face arp > request pentru un ip care nu are mac asociat in tabela arp. > > -- > Cioby > > > -- Attached file included as plaintext by Ecartis -- > -- File: signature.asc > -- Desc: This is a digitally signed message part > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.2.3 (GNU/Linux) > > iD8DBQBAPHMxQisRnSkd59cRAmx1AJ0Q/T9BiF58dZOo5wPFh4FX0BfFLACgq7Rc > T3lsz2AU1BOTtaFY4R5P4O8= > =bqOs > -----END PGP SIGNATURE----- > > > > --- > Detalii despre listele noastre de mail: http://www.lug.ro/ > > -- -- Attached file included as plaintext by Ecartis -- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQFAPHWwONlM6PUJv7kRAj92AJ9YQm4tTLFttc/bwxLFANqsZ/Aj+QCdHwnr fL9o6hm5RMqdz5kIDCHuQqo= =NwBN -----END PGP SIGNATURE----- --- Detalii despre listele noastre de mail: http://www.lug.ro/
