Subject: Re: MAC address based filtering
To: Martin Husemann <martin@duskware.de>
From: Andrew Brown <atatat@atatdot.net>
List: tech-net
Date: 01/18/2003 13:53:25
>> Then i recompiled the kernel source.
>> After a reboot i inserted static entries in the arp table.
>> This resulted in that new entries couldn't be learned anymore.
>
>Doesn't "ifconfig xxx -arp" do the same?

didn't work for me.  :-/

in one window:

	# ifconfig ex0 -arp
	# ifconfig ex0
	ex0: flags=88e3<UP,BROADCAST,NOTRAILERS,RUNNING,NOARP,SIMPLEX,\
			MULTICAST> mtu 1500
		capabilities=7<IP4CSUM,TCP4CSUM,UDP4CSUM>
		enabled=0
		address: 00:00:39:bd:96:19
		...
	# arp -d is
	# ping is
	PING is (192.168.7.141): 56 data bytes
	64 bytes from 192.168.7.141: icmp_seq=0 ttl=255 time=0.860 ms
	64 bytes from 192.168.7.141: icmp_seq=1 ttl=255 time=0.534 ms
	...
	^C
	this# arp -a
	is (192.168.7.132) at 00:50:04:68:c6:10 on ex0
	this (192.168.7.141) at 00:48:54:1f:ce:aa on ex0


in another window:

	# tcpdump -ens0
	13:41:40.889180 00:00:39:bd:96:19 ff:ff:ff:ff:ff:ff 0806 42: \
		arp who-has 192.168.7.141 tell 192.168.7.134
	13:41:40.889464 00:48:54:1f:ce:aa 00:00:39:bd:96:19 0806 60: \
		arp reply 192.168.7.141 is-at 00:48:54:1f:ce:aa
	13:41:40.889491 00:00:39:bd:96:19 00:48:54:1f:ce:aa 0800 98: \
		IP 192.168.7.134 > 192.168.7.141: icmp 64: echo request seq 0
	13:41:40.889878 00:48:54:1f:ce:aa 00:00:39:bd:96:19 0800 98: \
		IP 192.168.7.141 > 192.168.7.134: icmp 64: echo reply seq 0
	13:41:41.900111 00:00:39:bd:96:19 00:48:54:1f:ce:aa 0800 98: \
		IP 192.168.7.134 > 192.168.7.141: icmp 64: echo request seq 1
	13:41:41.900507 00:48:54:1f:ce:aa 00:00:39:bd:96:19 0800 98: \
		IP 192.168.7.141 > 192.168.7.134: icmp 64: echo reply seq 1
	...

-- 
|-----< "CODE WARRIOR" >-----|
codewarrior@daemon.org             * "ah!  i see you have the internet
twofsonet@graffiti.com (Andrew Brown)                that goes *ping*!"
werdna@squooshy.com       * "information is power -- share the wealth."