Re: Too Much ARP-ing

Joel D. Kraft (kraft@alpha.CES.CWRU.Edu)
Sun, 26 Jan 97 22:52:50 EST


>
>Your ethernet card is in promiscuous mode.
>

This was my initial thought. Even if this was so, there is no reason
for the kernel to ARP someone who just sent an ARP request since ALL the
information to cache that person was in the request they sent.

Anyway, ifconfig doesn't seem to think it is in promiscuous mode:

eth0 Link encap:10Mbps Ethernet HWaddr 00:00:1D:11:50:1B
inet addr:129.22.241.174 Bcast:129.22.255.255 Mask:255.255.0.0
EtherTalk Phase 2 addr:38/192
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:7070694 errors:0 dropped:0 overruns:0
TX packets:1160624 errors:0 dropped:0 overruns:0
Interrupt:10 Base address:0x280 Memory:d8000-1

eth0:0 Link encap:10Mbps Ethernet HWaddr 00:00:1D:11:50:1B
inet addr:129.22.250.132 Bcast:129.22.255.255 Mask:255.255.0.0
UP BROADCAST RUNNING MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0
TX packets:0 errors:0 dropped:0 overruns:0

In addition, tcpdump only shows only broadcast traffic and legitimate
traffic to and from my machine.

-- 
------------------------------------------------------------------------
 Joel D. Kraft    | Case Western Reserve University                ____
 jdk6@po.cwru.edu | Department of Computer Engineering & Science   \  /
--------------------------------------------------------------------\/--