Bugtraq mailing list archives

Re: Incorrect Linux ARP behavior


From: alan () LXORGUK UKUU ORG UK (Alan Cox)
Date: Sat, 19 Sep 1998 04:11:09 +0100


checking the destination MAC address there is no way to discern if the
packet was really bound for listening station.  To fix this problem all
that needs to be done is add the following check (pseudo code):

if(ether_header_destination != device_hardware_address) return;

        if(skb->pkt_type==PACKET_OTHERHOST)
        {
                kfree_skb(skb, FREE_READ);
                return;
        }

.. I'd agree thats a bug. In fact it got fixed about 10 seconds ago :0

There are btw several other ways to find promiscuous nodes especially
multicast aware ones.

Alan



Current thread: