+ Post New Thread
Results 1 to 4 of 4
Wireless Networks Thread, ARP Question in Technical; Hi All, This may be a completely stupid question, or it should perhaps go under 'Learning Network Manager' (i'll be ...
  1. #1
    basicchannel's Avatar
    Join Date
    May 2010
    Location
    Norfolk, UK
    Posts
    284
    Thank Post
    37
    Thanked 24 Times in 16 Posts
    Blog Entries
    1
    Rep Power
    24

    ARP Question

    Hi All,
    This may be a completely stupid question, or it should perhaps go under 'Learning Network Manager' (i'll be happy to accept either or both).
    We have a rogue IP address on the network and i've been using the ARP command on our gateway server to try and find the perpetrator. The problem is this person hasn't been online all day it seems, and I just have to make educated guesses at the best time to do a search (break times etc). Is there any way you can loop ARP requests so I can just leave it running all day and take action when it finds it?

    Thanks for any suggestions

  2. #2

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    10,053
    Thank Post
    3,584
    Thanked 1,123 Times in 1,025 Posts
    Rep Power
    377
    What are you trying to achieve from doing this exactly ?

    ie

    1. You want to see when said user is connected so you can have some proof that they are using the school network when they are not allowed

    2. You are trying to stop them from doing this ie using either or both the dns / dhcp console to establish that they are using the network as they have been assigned a dhcp address ( possibly using the dhcp reservation section to ensure that said persons network cards are getting assigned bogus ip address info ie wrong gateway ip addresses or other wrong ip address info ) so that when they try and connect using a web browser it just gives them an error page

    3. If you wanted to continue using the ARP command you could possibly make a batch script ( or script of some description ) that runs on the said server using the scheduler to run said script every so many seconds ie every 10 seconds or so and only to prompt you when it is succesfull along with any info you wanted ??

  3. #3

    m25man's Avatar
    Join Date
    Oct 2005
    Location
    Romford, Essex
    Posts
    1,682
    Thank Post
    49
    Thanked 484 Times in 351 Posts
    Rep Power
    144
    What gateway router are you using?
    I have seen persistent IP address issues arise when a NAT capable router is used in a No NAT config.
    The routers unused internal ip tables can get learnt by the LAN Devices.
    This is a limitation of some ISP routers.

    Failing that, if the bogus client is appearing in your dhcp table use a reservation to dead end the device by setting the gateway and dns back to itself This normally does the trick.

    ^^ As Mac said....
    Last edited by m25man; 14th February 2011 at 10:06 PM.

  4. #4

    powdarrmonkey's Avatar
    Join Date
    Feb 2008
    Location
    Alcester, Warwickshire
    Posts
    4,867
    Thank Post
    412
    Thanked 778 Times in 651 Posts
    Rep Power
    182
    Or tcpdump, the hardcore packet sniffer.



SHARE:
+ Post New Thread

Similar Threads

  1. [Fog] ARP Timeout
    By rocknrollstar in forum O/S Deployment
    Replies: 1
    Last Post: 10th December 2009, 12:44 AM
  2. BT Homehub ARP requests
    By Jackd in forum Wireless Networks
    Replies: 5
    Last Post: 15th December 2008, 11:31 AM
  3. arp flood!~
    By nokuku4u in forum Wireless Networks
    Replies: 9
    Last Post: 6th September 2008, 02:29 PM
  4. ARP Timeout
    By mrforgetful in forum Wireless Networks
    Replies: 6
    Last Post: 14th May 2007, 08:17 AM
  5. ARP overwritten DOS
    By CyberNerd in forum Wireless Networks
    Replies: 1
    Last Post: 24th May 2006, 01:10 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •