how can we spoof ethernet by ARP cache poisoning on unix through a program Post: 302165824

4 More Discussions You Might Find Interesting

1. IP Networking

disabling arp messages on unix

good morning everybody, since we replaced our router / gateway with two routers, which do load balancing (have 2 ip's and 2 mac's but come on the LAN as 1 ip-address), my freebsd's 4.8 clients keep notifying the users that the arp for that ip address have moved from mac1 to mac2, which is...

2. Solaris

ARP Cache

Dear all, We are testing two of our servers for mq series connectivity. The scenario is, when one machine is shutting down it's services there are some scripts that do a dns update, which removes the ip address and relates it to the ip address of the other node on our dns server, and the update...

3. Cybersecurity

Dns cache poisoning upgrade to bind9.5.0p2

Hi again guys, It seems this is a global thing affecting all the DNS bind versions prior to July 28 2008. I have my work cut out for me very soon, I see at least a handful of servers in my list that either need to patching or upgrading. How many of you guys are affected? Anybody successfully...

4. Programming

Manipulate the Linux ARP Cache in C

Hello, I need help on how to "access" or manipulate the Linux ARP Cache in C, here is the description of the project i'm working in: There are a lot of tools that analize ARP frames and send an e-mail to the sysadmin, that's easy. What i want to do is to inspect every ARP frame that arrives...

LEARN ABOUT DEBIAN

net::arp

ARP(3pm)						User Contributed Perl Documentation						  ARP(3pm)

NAME

       ARP - Perl extension for creating ARP packets

SYNOPSIS

	 use Net::ARP;
	 Net::ARP::send_packet('lo',		     # Device
			       '127.0.0.1',	     # Source IP
			       '127.0.0.1',	     # Destination IP
			       'aa:bb:cc:aa:bb:cc',  # Source MAC
			       'aa:bb:cc:aa:bb:cc',  # Destinaton MAC
			       'reply');	     # ARP operation

       $mac = Net::ARP::get_mac("eth0");

       print "$mac
";

       $mac = Net::ARP::arp_lookup($dev,"192.168.1.1");

       print "192.168.1.1 has got mac $mac
";

   IMPORTANT
       Version 1.0 will break with the API of PRE-1.0 versions, because the return value of arp_lookup() and get_mac() will no longer be passed as
       parameter, but returned!  I hope this decision is ok as long as we get a cleaner and more perlish API.

   DESCRIPTION
       This module can be used to create and send ARP packets and to get the mac address of an ethernet interface or ip address.

       send_packet()
	     Net::ARP::send_packet('lo',		 # Device
				   '127.0.0.1', 	 # Source IP
				   '127.0.0.1', 	 # Destination IP
				   'aa:bb:cc:aa:bb:cc',  # Source MAC
				   'aa:bb:cc:aa:bb:cc',  # Destinaton MAC
				   'reply');		 # ARP operation

	     I think this is self documentating.
	     ARP operation can be one of the following values:
	     request, reply, revrequest, revreply, invrequest, invreply.
	     The default ARP operation is reply.

       get_mac()
	     $mac = Net::ARP::get_mac("eth0");

	     This gets the MAC address of the eth0 interface and stores
	     it in the variable $mac. The return value is "unknown" if
	     the mac cannot be looked up.

       arp_lookup()
	     $mac = Net::ARP::arp_lookup($dev,"192.168.1.1");

	     This looks up the MAC address for the ip address 192.168.1.1
	     and stores it in the variable $mac. The return value is
	     "unknown" if the mac cannot be looked up.

SEE ALSO

	man -a arp

AUTHOR

	Bastian Ballmann [ Balle@chaostal.de ]
	http://www.datenterrorist.de

COPYRIGHT AND LICENSE

       Copyright (C) 2004-2007 by Bastian Ballmann

       This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself, either Perl version 5.8.1 or,
       at your option, any later version of Perl 5 you may have available.

perl v5.14.2							    2009-04-24								  ARP(3pm)