Re: Neighbor table overflow. Virus?

On Tue, 24 Jan 2006, in the Usenet newsgroup comp.os.linux.networking, in
article <iwwBf.379$K27.54@xxxxxxxxxxxxx>, Tauno Voipio wrote:

>The PPP client can imagine being a part of the local Ethernet
>subnet, if the PPP router is using proxy ARP.

I'm really not sure what you are trying to say here. For a dialup, the
peer that is dialing in has no concept of ARP - it's not even part of
the protocol. The function of the 'proxyarp' option to ANU ppp is to
add the "remote" IP address to the arp cache along with the MAC address
of "local" system. As ppp is a peer to peer protocol, there can be a
maximum number of such addresses - the O/P stated this server had ten
dialin lines, which adds just ten IP addresses. For an ISP type of
operation (clients on dialin accessing the Internet), proxyarp would
be a normal mode unless the server is masquerading.

Old guy
.

Relevant Pages

  • Re: Advanced Security Question
    ... > 192.168.100.100 and then use the real mac address of that client when it ... but in the latter case the same arp table should be ... Use two NICs on the ...
    (comp.os.linux.security)
  • Re: Neighbor table overflow. Virus?
    ... As soon as I disconnect that client ... >the problem disappears in the server. ... Entries in the ARP tables should only occur for IP addresses that are ... sniffing the connection to see WTF it's trying to connect ...
    (comp.os.linux.networking)
  • Re: NIM over WAN
    ... JA> I've been trying to use NIM with AIX 4.3.3 and AIX 5.1 over a WAN, ... the client locks up with an 'arp error' message (can't recall ... NIM works just fine when I use it in the same ... JA> cities, I get arp problems. ...
    (comp.unix.aix)
  • Re: Neighbor table overflow. Virus?
    ... It is obvious from the ARP table that hundreds of connections are comming from this client that cannot be established. ... sniffing the connection to see WTF it's trying to connect ... to reach all possible addresses in the local subnet. ...
    (comp.os.linux.networking)
  • [Full-Disclosure] follow up question...
    ... I caught this and got thinking...I don't know near enough about wireless ... What happens if two AP's with the same IP and MAC attempt to get on the same ... Subject: Static ARP Replies? ... > virtually done between the client and the access point). ...
    (Full-Disclosure)