Return to README.tcpdump CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / ipguard / doc

Annotation of embedaddon/ipguard/doc/README.tcpdump, revision 1.1

1.1     ! misho       1: 
        !             2: 00:0f:ea:d2:44:a4       192.168.1.1     - server MAC-IP pair
        !             3: 00:d0:b7:b5:ca:6b       192.168.1.10    - client MAC-IP pair
        !             4: 00:40:f4:53:e3:7d       192.168.1.66    - pirate MAC-IP pair
        !             5: de:ad:6b:a8:de:5b                       - ipguard fake MAC
        !             6: 
        !             7: #### Normal ARP session
        !             8: ################################
        !             9: 
        !            10: ## request client gratuitous
        !            11: 
        !            12: who-has 192.168.1.1 tell 192.168.1.1            requ client broadcast
        !            13:                                                 must not be answered
        !            14: 
        !            15: ## request client -> server
        !            16: 
        !            17: who-has 192.168.1.1 tell 192.168.1.10           requ client broadcast
        !            18: reply 192.168.1.1 is-at 00:0f:ea:d2:44:a4       resp server to client
        !            19: 
        !            20: ## request server -> client
        !            21: 
        !            22: who-has 192.168.1.10 tell 192.168.1.1           requ server broadcast
        !            23: reply 192.168.1.10 is-at 00:d0:b7:b5:ca:6b      resp client to server
        !            24: 
        !            25: #### Denied ARP by ipguard -n 2 fxp0
        !            26: ################################
        !            27: 
        !            28: ## request pirate gratuitous
        !            29: 
        !            30: who-has 192.168.1.66 tell 192.168.1.66          requ pirate broadcast
        !            31: reply 192.168.1.66 is-at de:ad:6b:a8:de:5b      resp ipguard to pirate
        !            32: reply 192.168.1.66 is-at de:ad:6b:a8:de:5b      resp ipguard to pirate
        !            33: reply 192.168.1.66 is-at de:ad:6b:a8:de:5b      resp ipguard to pirate
        !            34: 
        !            35: ## request pirate -> server
        !            36: 
        !            37: who-has 192.168.1.1 tell 192.168.1.66           requ pirate broadcast
        !            38: reply 192.168.1.1 is-at 00:0f:ea:d2:44:a4       resp server to pirate
        !            39: reply 192.168.1.1 is-at de:ad:6b:a8:de:5b       resp ipguard to pirate
        !            40: reply 192.168.1.1 is-at de:ad:6b:a8:de:5b       resp ipguard to pirate
        !            41: reply 192.168.1.66 is-at de:ad:6b:a8:de:5b      resp ipguard to pirate
        !            42: 
        !            43: #### Denied ARP by ipguard -x -n 2 fxp0
        !            44: ################################
        !            45: 
        !            46: ## request pirate gratuitous
        !            47: 
        !            48:     same as previous example
        !            49: 
        !            50: ## request pirate -> server
        !            51: 
        !            52:     same as previous example
        !            53: 
        !            54: ## request server -> pirate
        !            55: 
        !            56: who-has 192.168.1.66 tell 192.168.1.1           requ server broadcast
        !            57: reply 192.168.1.66 is-at 00:40:f4:53:e3:7d      resp pirate to server
        !            58: reply 192.168.1.66 is-at de:ad:6b:a8:de:5b      resp ipguard to server
        !            59: reply 192.168.1.66 is-at de:ad:6b:a8:de:5b      resp ipguard to server
        !            60: 
        !            61: #### Denied ARP by ipguard -z -x -n 2 fxp0
        !            62: ################################
        !            63: 
        !            64: ## request pirate (from client IP) gratuitous
        !            65: 
        !            66: who-has 192.168.1.10 tell 192.168.1.10          requ pirate broadcast
        !            67: reply 192.168.1.10 is-at 00:d0:b7:b5:ca:6b      resp client to pirate
        !            68: reply 192.168.1.10 is-at de:ad:6b:a8:de:5b      resp ipguard to pirate
        !            69: reply 192.168.1.10 is-at de:ad:6b:a8:de:5b      resp ipguard to pirate
        !            70: reply 192.168.1.10 is-at de:ad:6b:a8:de:5b      resp ipguard to pirate
        !            71: who-has 192.168.1.10 tell 192.168.1.10          requ fix ipguard broadcast
        !            72:                                                 with client MAC-IP
        !            73: 
        !            74: ## request pirate (from client IP) -> server
        !            75: 
        !            76: who-has 192.168.1.1 tell 192.168.1.10           requ pirate broadcast
        !            77: reply 192.168.1.1 is-at 00:0f:ea:d2:44:a4       resp server to pirate
        !            78: reply 192.168.1.1 is-at de:ad:6b:a8:de:5b       resp ipguard to pirate
        !            79: reply 192.168.1.1 is-at de:ad:6b:a8:de:5b       resp ipguard to pirate
        !            80: reply 192.168.1.10 is-at de:ad:6b:a8:de:5b      resp ipguard to pirate
        !            81: who-has 192.168.1.10 tell 192.168.1.10          requ fix ipguard broadcast
        !            82:                                                 with client MAC-IP
        !            83: 
        !            84: ## request pirate gratuitous
        !            85: 
        !            86: who-has 192.168.1.66 tell 192.168.1.66          requ pirate broadcast
        !            87: reply 192.168.1.66 is-at de:ad:6b:a8:de:5b      resp ipguard to pirate
        !            88: reply 192.168.1.66 is-at de:ad:6b:a8:de:5b      resp ipguard to pirate
        !            89: reply 192.168.1.66 is-at de:ad:6b:a8:de:5b      resp ipguard to pirate
        !            90: who-has 192.168.1.66 tell 192.168.1.66          requ poison ipguard broadcast
        !            91:                                                 with fake MAC
        !            92: 
        !            93: ## request pirate -> server
        !            94: 
        !            95: who-has 192.168.1.1 tell 192.168.1.66           requ pirate broadcast
        !            96: reply 192.168.1.1 is-at 00:0f:ea:d2:44:a4       resp server to pirate
        !            97: reply 192.168.1.1 is-at de:ad:6b:a8:de:5b       resp ipguard to pirate
        !            98: reply 192.168.1.1 is-at de:ad:6b:a8:de:5b       resp ipguard to pirate
        !            99: reply 192.168.1.66 is-at de:ad:6b:a8:de:5b      resp ipguard to pirate
        !           100: who-has 192.168.1.66 tell 192.168.1.66          requ poison ipguard broadcast
        !           101:                                                 with fake MAC
        !           102: 
        !           103: ##  $Id: README.tcpdump,v 1.8 2010/07/12 03:46:52 sead Exp $