nanog mailing list archives
Re: Sending ARP request to unicast MAC instead of broadcast MAC address?
From: Ingo Flaschberger <if () xip at>
Date: Thu, 17 Jun 2010 04:10:07 +0200 (CEST)
Dear Chris,
OK, this sounds Really Wacky (or, Really Hacky if you're into puns) but there's a reason for it, I swear... Will typical OSS UNIX kernels (Linux, BSD, MacOS X, etc) reply to a crafted ARP request that, instead of having FF:FF:FF:FF:FF:FF as its destination MAC address, is instead sent to the already-known unicast MAC address of the host?
Try or read kernel source.
Next, what would be your utility of choice for crafting such a packet? Or is this something one would need to code up by hand in a lower-level language?
http://www.perihel.at/sec/mz/ should be able todo this. Kind regards, Ingo Flaschberger
Current thread:
- Sending ARP request to unicast MAC instead of broadcast MAC address? Chris Woodfield (Jun 16)
- Re: Sending ARP request to unicast MAC instead of broadcast MAC address? James Hess (Jun 16)
- Re: Sending ARP request to unicast MAC instead of broadcast MAC address? Ingo Flaschberger (Jun 16)
- Re: Sending ARP request to unicast MAC instead of broadcast MAC address? Crist Clark (Jun 17)
- Re: Sending ARP request to unicast MAC instead of broadcast MAC address? Chris Woodfield (Jun 17)
- Re: Sending ARP request to unicast MAC instead of broadcast MAC address? Steven King (Jun 17)