[CLUE-Tech] explanation of tcpdump output

[Brandon N]

THis one is easy,
ARP is how a computer goes from IP address to ethernet (MAC) address.

I'm a computer, I have a packet for 10.53.81.197,  I know that it's on
my subnet, but I don't know which specific computer so I send out a
packet to everyone saying, "Hey, if you're 10.53.81.187, tell me your
MAC address."  He responds, I cache that for a short period of time in
case I need it again, and send out the packet.  Seeing them is nothing
out of the ordinary.  You don't see the replies because they are
intended for a specific host and your cable modem drops anything not
intended for you.

Brandon
--- Jeremiah Stanley <miah at miah.org> wrote:
> Here is a sample of what I am getting bombarded with, can anyone
> decode
> this for me?
> 
> 20:44:06.830000 eth1 B arp who-has 65.6.97.151 tell 65.6.97.1
> 20:44:07.010000 eth1 B arp who-has 10.96.127.93 tell 10.96.126.1
> 20:44:07.170000 eth1 B arp who-has 10.53.81.197 tell 10.53.81.1
> 20:44:07.370000 eth1 B arp who-has 24.251.26.95 tell 24.251.26.1
> 20:44:07.430000 eth1 B arp who-has 24.255.167.51 tell 24.255.167.1
> 20:44:07.460000 eth1 B arp who-has 24.255.167.77 tell 24.255.167.1
> 20:44:07.920000 eth1 B arp who-has 65.6.97.15 tell 65.6.97.1
> 20:44:08.050000 eth1 B arp who-has 24.4.229.217 tell 24.4.229.129
> 20:44:08.260000 eth1 B arp who-has 24.251.26.50 tell 24.251.26.1
> 20:44:08.480000 eth1 B arp who-has 65.10.212.65 tell 65.10.212.1
> 20:44:08.880000 eth1 B arp who-has 65.6.97.47 tell 65.6.97.1
> 20:44:09.070000 eth1 B arp who-has 10.53.81.125 tell 10.53.81.1
> 20:44:09.350000 eth1 B arp who-has 10.96.126.93 tell 10.96.126.1
> 20:44:09.350000 eth1 B arp who-has 65.15.173.107 tell 65.15.173.1
> 20:44:09.400000 eth1 B arp who-has 65.10.212.43 tell 65.10.212.1
> 20:44:09.510000 eth1 B arp who-has 24.183.226.196 tell 24.183.226.1
> 
> Thanks,
> JStanley
> -- 
> Every so often, I like to go to the window, look up, and smile for a
> satellite picture.   -- Stephen Wright
> 
> _______________________________________________
> CLUE-Tech mailing list
> CLUE-Tech at clue.denver.co.us
> http://clue.denver.co.us/mailman/listinfo/clue-tech


__________________________________________________
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/