| Author |
Message |
|
|
Post subject: Arpwatch flip flop s ip routra
 Posted: 04.10.2005 - 12:44 #23590
|
|
Basic
Joined: Feb 07, 2005
Posts: 18
|
|
pred nejakym casom som rozcodil arpwatch a z casu na cas sa vyskytuju hlasenie "flip flop" - konflikt dvoch mac naparovanych na jednu ip a to s mac riadneho uzivatale a mac-ok interfasu routra, pomocou ktoreho je tento uzivatel pripojeny.
ak ste sa s tym uz niekto stretli je to nejaky standardny bug arpwatchu, alebo si fakt niekto nastavil mac routra + ip uzivatela? |
|
|
| |
|
|
|
 |
|
|
|
Post subject: RE: Arpwatch flip flop s ip routra
Posted: 04.10.2005 - 17:18 #23596
|
|
Majster
Joined: Feb 25, 2003
Posts: 2606
Location: BA,BB
|
|
| "flip flop" nie je BUG, znamena to ze sa niekto pokusa o ARP spoofing, pouziva sa to na sniffovanie siete cez switch, jedna sa vpodstate o utok Man In The Middle. Podla MAC v normalnom stave (po prepnuti) zistis o ktoreho experta sa jedna. |
|
|
| |
|
|
|
|
|
|
|
Post subject: RE: Arpwatch flip flop s ip routra
Posted: 05.10.2005 - 07:58 #23607
|
|
Guru
Joined: Jan 30, 2003
Posts: 1572
|
|
| ondro, posli mi prosim konfigurak arpwatchu, pretoze mne sa nepodarilo nakonfigurovat ho tak aby som to nemusel rucne prehliadat, dik kiwi zavin rupkki bod sk. Dik |
|
|
| |
|
|
|
|
|
|
|
Post subject: RE: Arpwatch flip flop s ip routra
Posted: 05.10.2005 - 09:17 #23608
|
|
Majster
Joined: Máj 12, 2004
Posts: 4579
Location: Bratislava
|
|
|
|
|
|
|
|
|
Post subject: RE: Arpwatch flip flop s ip routra
Posted: 05.10.2005 - 14:41 #23633
|
|
Basic
Joined: Feb 07, 2005
Posts: 18
|
|
RE: eXplorer: nieco take som ocakaval, nakolko tie hlasenia sa u tochto konkretneho cloveka ked sa objavia, vyskytuju sa pomerne casto - niekolko krat za minutu.
ale sem tam (raz za mesiac) sa stava, ze flip flop mi hlasi aj ked som si isty, ze na tom kompe ziadny sniffer ani nic podobne v tom case nebezi (stalo sa mi to na notebooku po reboote do linuxu). ale v takom pripade je to hlasenie len jedno medzi macom notebooku a interfacu routra.
skusim toho chytraka nejak vymaknut pri cine 
RE: kiwi, Chalan: na debian sarge/woody, mam v /etc/arpwatch.conf toto:
eth0 -m root+eth0
eth2 -m root+eth1
a v /etc/default/arpwatch toto :
ARGS="-N -p"
RUNAS="arpwatch"
inak ako obycajne pomaha klasika rtfm  |
|
|
| |
|
|
|
|
|
|
|
Post subject: RE: Arpwatch flip flop s ip routra
Posted: 05.10.2005 - 18:34 #23645
|
|
Guru
Joined: Jan 30, 2003
Posts: 1572
|
|
| no vysvetli mi prosim ta, kde ti hlasi flip-flop, posiela ti to na mail, alebo ako? |
|
|
| |
|
|
|
|
|
|
|
Post subject: RE: Arpwatch flip flop s ip routra
Posted: 06.10.2005 - 07:25 #23672
|
|
Basic
Joined: Feb 07, 2005
Posts: 18
|
|
kiwi wrote: ›no vysvetli mi prosim ta, kde ti hlasi flip-flop, posiela ti to na mail, alebo ako?
jo, na mail |
|
|
| |
|
|
|
|
|
|
|
Post subject: RE: Arpwatch flip flop s ip routra
Posted: 06.10.2005 - 21:40 #23709
|
|
Basic
Joined: Feb 04, 2005
Posts: 175
Location: Gan
|
|
| aj mne |
|
|
| |
|
|
|
|
|
|
Powered by PNphpBB2 © 2003-2005 The PNphpBB Group
Credits |
