[7987] in bugtraq
Re: Incorrect Linux ARP behavior
daemon@ATHENA.MIT.EDU (Alan Cox)
Sat Sep 19 20:02:28 1998
Date: Sat, 19 Sep 1998 04:11:09 +0100
Reply-To: Alan Cox <alan@LXORGUK.UKUU.ORG.UK>
From: Alan Cox <alan@LXORGUK.UKUU.ORG.UK>
X-To: smm@WPI.EDU
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <199809190014.UAA29225@acestes-fe0.ultra.net> from "Seth McGann"
at Sep 18, 98 08:14:28 pm
> checking the destination MAC address there is no way to discern if the
> packet was really bound for listening station. To fix this problem all
> that needs to be done is add the following check (pseudo code):
>
> if(ether_header_destination != device_hardware_address) return;
if(skb->pkt_type==PACKET_OTHERHOST)
{
kfree_skb(skb, FREE_READ);
return;
}
.. I'd agree thats a bug. In fact it got fixed about 10 seconds ago :0
There are btw several other ways to find promiscuous nodes especially
multicast aware ones.
Alan
