ARP request bug?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello Experts,

With 00:04:23:bb:18:56 being a Linux box, it gets a ping request from a network device:

05:50:50.393373 00:0c:db:b5:b7:00 (oui Unknown) > 00:04:23:bb:18:56 (oui Unknown), ethertype IPv4 (0x0800), length 60: 172.20.11.3 > 192.168.70.1: ICMP echo request, id 43981, seq 1, length 24

Before replying (even though it could, since it has the MAC as part of the ping request) it decides to query for the MAC based on source IP of the original ping request:

05:50:50.402347 00:04:23:bb:18:56 (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 42: Request who-has 172.20.11.3 tell 192.168.70.1, length 28

The tell section indicates to "tell 192.168.70.1", but the interface on which this came in has an IP of 172.20.11.1. 192.168.70.1 is another IP on the Linux router, on a different interface.

Shouldn't the ARP request say "tell 172.20.11.1" instead given ARP is an ethernet protocol, incapable of routing to 192.168.70.1? The reply to this broadcast never comes back from the other network device due to the weird "tell 192.168.70.1" being there. The end result is complete ping loss.

Thanks for any insight,

--Bart

--
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux 802.1Q VLAN]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Git]     [Bugtraq]     [Yosemite News and Information]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux PCI]     [Linux Admin]     [Samba]

  Powered by Linux