version 1.1.1.1, 2012/02/21 22:16:27
|
version 1.1.1.2, 2014/06/15 16:26:43
|
Line 2 arping/README
|
Line 2 arping/README
|
|
|
ARP Ping |
ARP Ping |
|
|
By Thomas Habets <thomas@habets.pp.se> | By Thomas Habets <thomas@habets.se> |
|
|
http://www.habets.pp.se/synscan/ |
http://www.habets.pp.se/synscan/ |
http://github.com/ThomasHabets/arping |
http://github.com/ThomasHabets/arping |
Line 191 A: Be my guest, but if care about security *at all* yo
|
Line 191 A: Be my guest, but if care about security *at all* yo
|
a network debugging tool, which generates low-level network packets that |
a network debugging tool, which generates low-level network packets that |
ordinary users have absolutely no business generating. |
ordinary users have absolutely no business generating. |
|
|
For example, I don't protect against an ALRM signal flood, which will result |
|
in a packet flood. (arping 2.x doesn't have this issue) |
|
|
|
If you are honestly debugging the network then I don't see why you aren't |
If you are honestly debugging the network then I don't see why you aren't |
root already. |
root already. |
|
|
If you think I'm wrong, tell me why. | That being said, on Linux you can add the CAP_NET_RAW capability to arping |
| limiting the damage if arping were to be compromised: |
| sudo setcap cap_net_raw+ep /usr/local/sbin/arping |
| This requires a libnet which does not explicitly check for uid 0. The |
| current version of libnet does check this, so unless you patch it it will |
| not help. |
| |
| Patch: |
| http://github.com/ThomasHabets/libnet/commit/aaa383b5c816107082508b7646929a9479b81645 |
--- |
--- |
Q: What's this -A switch all about, I don't understand it. |
Q: What's this -A switch all about, I don't understand it. |
|
|
Line 280 For pinging MAC addresses:
|
Line 285 For pinging MAC addresses:
|
range it searches is hard-coded. |
range it searches is hard-coded. |
I may add this to arping some day, but don't hold your breath. |
I may add this to arping some day, but don't hold your breath. |
|
|
---------------------------------------------------------------------------- | ----------------------------------------------------------------------- |
Send questions/suggestions/patches/rants/money/alphas to thomas@habets.pp.se | Send questions/suggestions/patches/rants/money/envy to thomas@habets.se |