debug arp table

Wiadomość

heliox · #1

Czesc,

Po włączeniu debuga na arp table mam:

003639: May 27 10:02:21.194: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003640: May 27 10:02:21.689: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003641: May 27 10:02:21.689: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003642: May 27 10:02:21.689: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003643: May 27 10:02:21.689: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003644: May 27 10:02:21.772: ARP TABLE: modifying entry 192.168.7.225/0019.99fc.0c41 on Vl1 for Dynamic
003645: May 27 10:02:21.974: ARP TABLE: modifying entry 10.0.0.23/bc5f.f4be.6065 on Vl1 for Dynamic
003646: May 27 10:02:21.982: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003647: May 27 10:02:21.982: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003648: May 27 10:02:21.991: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003649: May 27 10:02:21.999: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003650: May 27 10:02:21.999: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003651: May 27 10:02:22.007: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003652: May 27 10:02:22.007: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003653: May 27 10:02:22.016: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003654: May 27 10:02:22.016: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003655: May 27 10:02:22.024: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003656: May 27 10:02:22.033: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003657: May 27 10:02:22.033: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003658: May 27 10:02:22.183: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003659: May 27 10:02:22.183: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003660: May 27 10:02:22.192: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003661: May 27 10:02:22.192: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003662: May 27 10:02:22.687: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003663: May 27 10:02:22.687: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003664: May 27 10:02:22.687: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003665: May 27 10:02:22.687: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003666: May 27 10:02:22.687: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic
003667: May 27 10:02:22.695: ARP TABLE: modifying entry 192.168.0.52/bc5f.f4be.6065 on Vl1 for Dynamic

czy to normalne zeby co chwile nastepowała modyfikacja adresu który się nie zmienia ? Aging time ustawiony na 604800 sek.

Pozdrawiam
Krzysiek

drozdov · #2

Wyglada na to że jakaś stacja Ci wściekle wysyła GARP - warto się dowiedzieć dlaczego - może jakiś mechanizm HA albo ARP Poisoning ?

heliox · #3

czy jesli ktoś skanuje sieć to może być taki sam efekt ?

drozdov · #4

heliox pisze:czy jesli ktoś skanuje sieć to może być taki sam efekt ?

Jeżeli przez skanowanie sieci rozumiesz skanowanie adresów IP i otwartych portów to zdecydowanie nie. Spróbuj odnaleźć stację i zobaczyć co tam się dzieje.