+ Post New Thread
Results 1 to 4 of 4
Wireless Networks Thread, ARP Question in Technical; Hi All, This may be a completely stupid question, or it should perhaps go under 'Learning Network Manager' (i'll be ...
  1. #1
    basicchannel's Avatar
    Join Date
    May 2010
    Location
    Norfolk, UK
    Posts
    279
    Thank Post
    36
    Thanked 22 Times in 14 Posts
    Blog Entries
    1
    Rep Power
    23

    ARP Question

    Hi All,
    This may be a completely stupid question, or it should perhaps go under 'Learning Network Manager' (i'll be happy to accept either or both).
    We have a rogue IP address on the network and i've been using the ARP command on our gateway server to try and find the perpetrator. The problem is this person hasn't been online all day it seems, and I just have to make educated guesses at the best time to do a search (break times etc). Is there any way you can loop ARP requests so I can just leave it running all day and take action when it finds it?

    Thanks for any suggestions

  2. #2

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    9,680
    Thank Post
    3,210
    Thanked 1,030 Times in 955 Posts
    Rep Power
    361
    What are you trying to achieve from doing this exactly ?

    ie

    1. You want to see when said user is connected so you can have some proof that they are using the school network when they are not allowed

    2. You are trying to stop them from doing this ie using either or both the dns / dhcp console to establish that they are using the network as they have been assigned a dhcp address ( possibly using the dhcp reservation section to ensure that said persons network cards are getting assigned bogus ip address info ie wrong gateway ip addresses or other wrong ip address info ) so that when they try and connect using a web browser it just gives them an error page

    3. If you wanted to continue using the ARP command you could possibly make a batch script ( or script of some description ) that runs on the said server using the scheduler to run said script every so many seconds ie every 10 seconds or so and only to prompt you when it is succesfull along with any info you wanted ??

  3. #3

    m25man's Avatar
    Join Date
    Oct 2005
    Location
    Romford, Essex
    Posts
    1,618
    Thank Post
    49
    Thanked 448 Times in 331 Posts
    Rep Power
    136
    What gateway router are you using?
    I have seen persistent IP address issues arise when a NAT capable router is used in a No NAT config.
    The routers unused internal ip tables can get learnt by the LAN Devices.
    This is a limitation of some ISP routers.

    Failing that, if the bogus client is appearing in your dhcp table use a reservation to dead end the device by setting the gateway and dns back to itself This normally does the trick.

    ^^ As Mac said....
    Last edited by m25man; 14th February 2011 at 09:06 PM.

  4. #4

    powdarrmonkey's Avatar
    Join Date
    Feb 2008
    Location
    Alcester, Warwickshire
    Posts
    4,859
    Thank Post
    412
    Thanked 777 Times in 650 Posts
    Rep Power
    182
    Or tcpdump, the hardcore packet sniffer.

SHARE:
+ Post New Thread

Similar Threads

  1. [Fog] ARP Timeout
    By rocknrollstar in forum O/S Deployment
    Replies: 1
    Last Post: 9th December 2009, 11:44 PM
  2. BT Homehub ARP requests
    By Jackd in forum Wireless Networks
    Replies: 5
    Last Post: 15th December 2008, 10:31 AM
  3. arp flood!~
    By nokuku4u in forum Wireless Networks
    Replies: 9
    Last Post: 6th September 2008, 01:29 PM
  4. ARP Timeout
    By mrforgetful in forum Wireless Networks
    Replies: 6
    Last Post: 14th May 2007, 07:17 AM
  5. ARP overwritten DOS
    By CyberNerd in forum Wireless Networks
    Replies: 1
    Last Post: 24th May 2006, 12:10 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •