Sponsored Content
Full Discussion: arp questions
Top Forums UNIX for Advanced & Expert Users arp questions Post 302553058 by Corona688 on Tuesday 6th of September 2011 02:20:11 PM
Old 09-06-2011
Quote:
Originally Posted by COKEDUDE
Can someone please explain this output to me. Why doesn't ifconfig show the same info?
ifconfig just shows you information on your own network card. (which does have one bit of arp-related information -- the hwaddr). Entries in your ARP table are from other network cards -- other computers on the same subnet.

This is because to communicate with these addresses, it needs their MAC addresses, and must ask for them. On a local network, i.e. things on the same subnet as you, IP doesn't need to bother routing -- it can transmit directly to the destination network card and expect to be heard. But to talk to a card and not an IP, it needs the MAC address. If you're talking to something not on the local subnet, it doesn't care about the destination's MAC address, it just sends it to the appropriate gateway, which forwards it along. (You'd need the gateway's mac address, though!)

ARP is how it finds out MAC addresses. It works without IP or routing or any addressing at all -- it broadcasts requests and replies across an entire subnet. "arp who-has 10.71.0.1" would get answered with "arp reply 00:1b:21:2b:eb:0c has 10.71.0.1", so your computer would know to send packets for 10.71.0.1 directly to 00:1b:21:2b:eb:0c. It does all this without the programmer having to intervene at all, as far as IP can tell it's just 10.71.0.1 talking to 10.71.0.2 or whatever.

Since this bypasses all routing, I've seen hardwired ARP addresses abused to allow one IP address to talk across multiple subnets on the same wire, though I'm not convinced this would work everywhere.

Last edited by Corona688; 09-06-2011 at 03:27 PM..
This User Gave Thanks to Corona688 For This Post:
 

10 More Discussions You Might Find Interesting

1. Solaris

ARP Cache

Dear all, We are testing two of our servers for mq series connectivity. The scenario is, when one machine is shutting down it's services there are some scripts that do a dns update, which removes the ip address and relates it to the ip address of the other node on our dns server, and the update... (7 Replies)
Discussion started by: earlysame55
7 Replies

2. IP Networking

ARP Req Pkt

Does ARP Request packet Contains MAC Address of dest during broadcast? I found It So... When i captured ARP Req Pkts on ethereal... Rgds -Meti (1 Reply)
Discussion started by: ashokmeti
1 Replies

3. HP-UX

HW Address and arp

I was checking nettl output for a unstable telnet to my server. this is part of output: ### ***********************************STREAMS/UX*******************************@#% Timestamp : Sun Jun 22 EETDST 2008 22:14:47.492899 Process ID : Subsystem ... (4 Replies)
Discussion started by: xramm
4 Replies

4. IP Networking

Modifying ARP frames

Hi All, Is there any way to modify or filter the ARP frames?? thanks! (2 Replies)
Discussion started by: lagigliaivan
2 Replies

5. IP Networking

arp output (flags)

I'm running an arp -an on a Solaris 10 box. We're using IPMP. One of the systems is not able to see a host on the same network. The only difference between the two systems (one is having a problem, the other isn't) at least so far is the output of arp: # arp -an | grep 224.55 e1000g5... (1 Reply)
Discussion started by: BOFH
1 Replies

6. Red Hat

Arp Problem

Dear All i have a linux proxy server which has RHEL-5 64 bit, it has two interfaces, it has the following details eth0=10.200.14.42 eth3=10.201.14.42 default gateway=10.201.14.254 one static route=192.168.0.0/24 gw 10.200.14.254 i am facing a problem when i ping 10.201.14.42 from... (2 Replies)
Discussion started by: surfer24
2 Replies

7. IP Networking

Stuck ARP entries

About a week ago a customer hooked up a wireless router backwards to our network, causing it to serve incorrect DHCP addresses to some of them. Our networks are mostly statically assigned so this didn't cause as much damage as it might have, but now, over a week later, I still have incomplete... (1 Reply)
Discussion started by: Corona688
1 Replies

8. IP Networking

necessary ARP request?

Hello, I have 2 clients with Unix installed. host1: eth0 (192.168.5.10) & eth1 (192.168.10.10) host2: eth0 (192.168.10.20) I've connected host1-eth1 to host2-eth0. host1-eth0 isn't connected. I started 'tcpdump' on wonder that host2 got ARP requests for 192.168.5.10. Any idea why host1... (2 Replies)
Discussion started by: daWonderer
2 Replies

9. War Stories

What arp -s is good for

A customer appears to have drastically misunderstood our instructions for connecting to our WAN. He set his PC IP address to the same as one of the bridges. :mad: :wall: This caused much confusion on the network, to put it mildly. He called to complain about the poor performance of the network... (13 Replies)
Discussion started by: Corona688
13 Replies

10. Red Hat

[RedHat] ARP issue

Hello, I am setting up a new RedHat server with two network interfaces. These interfaces are on different subnets, and connected to the same firewall. I'm trying to reach a remote IP. It works fine from the first interface. The second interface however, is making ARP requests instead of... (0 Replies)
Discussion started by: Wanou85
0 Replies
arp(1M) 						  System Administration Commands						   arp(1M)

NAME
arp - address resolution display and control SYNOPSIS
arp hostname arp -a [-n] arp -d hostname arp -f filename arp -s hostname ether_address [temp] [pub] [trail] [permanent] DESCRIPTION
The arp program displays and modifies the Internet-to-MAC address translation tables used by the address resolution protocol (see arp(7P)). With no flags, the program displays the current ARP entry for hostname. The host may be specified by name or by number, using Internet dot notation. Options that modify the ARP translation tables (-d, -f, and -s) can be used only when the invoked command is granted the sys_net_config privilege. See privileges(5). OPTIONS
-a Display all of the current ARP entries. The definition for the flags in the table are: d Unverified; this is a local IP address that is currently undergoing Duplicate Address Detection. ARP will not respond to requests for this address until Duplicate Address Detection completes. o Old; this entry is aging away. If IP requests it again, a new ARP query will be generated. This state is used for detecting peer address changes. y Delayed; periodic address defense and conflict detection was unable to send a packet due to internal network use limits for non- traffic-related messages (100 packets per hour per interface). This occurs only on interfaces with very large numbers of aliases. A Authority; this machine is authoritative for this IP address. ARP will not accept updates from other machines for this entry. L Local; this is a local IP address configured on one of the machine's logical interfaces. ARP will defend this address if another node attempts to claim it. M Mapping; only used for the multicast entry for 224.0.0.0 P Publish; includes IP address for the machine and the addresses that have explicitly been added by the -s option. ARP will respond to ARP requests for this address. S Static; entry cannot be changed by learned information. This indicates that the permanent flag was used when creating the entry. U Unresolved; waiting for ARP response. You can use the -n option with the -a option to disable the automatic numeric IP address-to-name translation. Use arp -an or arp -na to display numeric IP addresses. The arp -a option is equivalent to: # netstat -p -f inet ...and -an and -na are equivalent to: # netstat -pn -f inet -d Delete an entry for the host called hostname. Note that ARP entries for IPMP (IP Network Multipathing) data and test addresses are managed by the kernel and thus cannot be deleted. -f Read the file named filename and set multiple entries in the ARP tables. Entries in the file should be of the form: hostname MACaddress [temp] [pub] [trail] [permanent] See the -s option for argument definitions. -s Create an ARP entry for the host called hostname with the MAC address MACaddress. For example, an Ethernet address is given as six hexadecimal bytes separated by colons. The entry will not be subject to deletion by aging unless the word temp is specified in the command. If the word pub is specified, the entry will be published, which means that this system will respond to ARP requests for hostname even though the hostname is not its own. The word permanent indicates that the system will not accept MAC address changes for hostname from the network. Solaris does not implement trailer encapsulation, and the word trail is accepted on entries for compatibility only. arp -s can be used for a limited form of proxy ARP when a host on one of the directly attached networks is not physically present on a subnet. Another machine can then be configured to respond to ARP requests using arp -s. This is useful in certain SLIP configura- tions. Non-temporary proxy ARP entries for an IPMP (IP Network Multipathing) group are automatically managed by the kernel. Specifically, if the hardware address in an entry matches the hardware address of an IP interface in an IPMP group, and the IP address is not local to the system, this will be regarded as an IPMP proxy ARP entry. This entry will have its hardware address automatically adjusted in order to keep the IP address reachable so long as the IPMP group has not entirely failed. ARP entries must be consistent across an IPMP group. Therefore, ARP entries cannot be associated with individual underlying IP inter- faces in an IPMP group, and must instead be associated with the corresponding IPMP IP interface. Note that ARP entries for IPMP data and test addresses are managed by the kernel and thus cannot be changed. ATTRIBUTES
See attributes(5) for descriptions of the following attributes: +-----------------------------+-----------------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +-----------------------------+-----------------------------+ |Availability |SUNWcsu | +-----------------------------+-----------------------------+ SEE ALSO
ifconfig(1M), netstat(1M), attributes(5), privileges(5), arp(7P) SunOS 5.11 5 Jan 2009 arp(1M)
All times are GMT -4. The time now is 05:57 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy