Re: BPF to filter/mod ARP

From: Michael Tuexen <michael.tuexen_at_lurchi.franken.de>
Date: Wed, 01 Mar 2023 21:32:10 UTC 
> On 1. Mar 2023, at 22:10, Scheffenegger, Richard <Richard.Scheffenegger@netapp.com> wrote:
> 
>>> On 1. Mar 2023, at 21:33, Scheffenegger, Richard <rscheff@freebsd.org> wrote:
>>> 
>>> Hi group,
>>> 
>>> Maybe someone can help me with this question - as I am usually only looking at L4 and the top side of L3 ;)
>> 
>>> In order to validate a peculiar switches behavior, I want to adjust some fields in gracious arps sent out by an interface, after a new IP is assigned or changed.
> 
>> Wouldn't scapy allow you to do this kind of testing?
> 
> Unfortunately not - I don't want to forge another packet, I want to make sure only the specific one is being sent, with the standard GARP retransmissions and so on.
Can't you test what you want to test by generating all the required packets from scapy? ARP is a pretty simple protocol...

Best regards
Michael
> 
> Richard
>