ARP(4) spoofing?
Brent Jones
brent.jones at otago.ac.nz
Mon Mar 17 03:49:26 UTC 2008
> -----Original Message-----
> From: owner-freebsd-questions at freebsd.org
> [mailto:owner-freebsd-questions at freebsd.org] On Behalf Of Modulok
> Sent: Monday, 17 March 2008 4:36 p.m.
> To: freebsd-questions at freebsd.org
> Subject: ARP(4) spoofing?
>
> Would this be ARP(4) spoofing, or is it just me? How would I
> confirm it?
>
> arp: 192.168.1.1 is on lo0 but got reply from xx:xx:xx:xx:xx:xx on em1
> last message repeated 18 times
> This is on a FreeBSD router, em1 is Internet-facing. 192.168.1.1 (em0)
> is LAN facing and permanent entry in the arp cache. This happens
> constantly and is slowly filling my log files.
>
> Thoughts? Suggestions?
> -Modulok-
What does an "ifconfig -a" on your machine show? It looks like you've
configured your loopback interface to also have 192.168.1.1
Cheers,
Brent
More information about the freebsd-questions
mailing list