Kernel arp moved from Gtw



  • RESULTS OF HIS LOG

    Apr 29 11:50:24 kernel: arp: 192.168.30.78 moved from 5b:16:3c:73:11:08 to 00:17:9a:37:91:1d on vr0
    Apr 29 11:50:24 kernel: arp: 192.168.30.78 moved from 00:17:9a:37:91:1d to 5b:16:3c:73:11:08 on vr0
    Apr 29 11:50:23 kernel: arp: 192.168.30.78 moved from 5b:6d:77:15:69:79 to 00:17:9a:37:91:1d on vr0
    Apr 29 11:50:23 kernel: arp: 192.168.30.78 moved from 00:17:9a:37:91:1d to 5b:6d:77:15:69:79 on vr0
    Apr 29 11:50:22 kernel: arp: 192.168.30.78 moved from 5b:43:31:37:41:6a to 00:17:9a:37:91:1d on vr0
    Apr 29 11:50:22 kernel: arp: 192.168.30.78 moved from 00:17:9a:37:91:1d to 5b:43:31:37:41:6a on vr0
    Apr 29 11:50:21 kernel: arp: 192.168.30.78 moved from 5b:19:6b:59:18:5a to 00:17:9a:37:91:1d on vr0
    Apr 29 11:50:21 kernel: arp: 192.168.30.78 moved from 00:17:9a:37:91:1d to 5b:19:6b:59:18:5a on vr0
    Apr 29 11:50:20 kernel: arp: 192.168.30.78 moved from 5b:6f:25:7b:70:4b to 00:17:9a:37:91:1d on vr0
    Apr 29 11:50:20 kernel: arp: 192.168.30.78 moved from 00:17:9a:37:91:1d to 5b:6f:25:7b:70:4b on vr0
    Apr 29 11:50:19 kernel: arp: 192.168.30.78 moved from 5b:45:5f:1d:48:3b to 00:17:9a:37:91:1d on vr0
    Apr 29 11:50:19 kernel: arp: 192.168.30.78 moved from 00:17:9a:37:91:1d to 5b:45:5f:1d:48:3b on vr0
    Apr 29 11:50:18 kernel: arp: 192.168.30.78 moved from 5b:1b:19:3f:1f:2c to 00:17:9a:37:91:1d on vr0
    Apr 29 11:50:18 kernel: arp: 192.168.30.78 moved from 00:17:9a:37:91:1d to 5b:1b:19:3f:1f:2c on vr0
    Apr 29 11:50:17 kernel: arp: 192.168.30.78 moved from 5b:71:54:61:77:1d to 00:17:9a:37:91:1d on vr0

    MAC ORIGINAL DEFAULT GT PSENSE : 00:16:17:a0:2d:eb
    MAC ORIGINAL PC with netcut      : 00:17:9a:37:91:1d

    AFTER RUNING NETCUT BE CHANGED :

    MAC GTw                        : b:16:3c:73:11:08
    MAC PC WIT NETCUT        : 00:17:9a:37:91:1d

    so that all connections from Lan disconnected

    How the way out to overcome problems like these?  ???



  • The one IP address (192.168.30.78) is used by two different systems (or two different interfaces connected to the same subnet). These interfaces have MAC addresses 5b:16:3c:73:11:08 and 00:17:9a:37:91:1d.

    This is an invalid configuration. If you have attempted to "move an IP address" you should probably reboot the two systems concerned to clear up any confusion caused by the IP address move. If your DHCP configuration assigns the same IP address to two different MAC addresses (e.g. wired and wireless interfaces on the one laptop) you should ensure that only one interface is enabled at a time.



  • IP address (192.168.30.78) 192.168.30.1 a subnet of the gateway (mac address 00:16:17: a0: 2d: eb) then perform a soft ip 192.168.30.78 netcut it, then try the connection from the gateway. (192.168.30.1). the results of all subnets to be disconnected. (netcut like can control the connection from the gateway (192.168.30.1)
    if in restar again .. connection to be normal, if there is a subnet which perform a soft like netcut then disconnect from the gateway and then all subnets disconnected ..
    Well how about a solution for ip 192.168.30.78 so unable to control even disconnect from the gateway (192.168.30.1)



  • As an Illustration. please try to run the program Net CUT in one client subnet on the LAN, it will show the default gateway of the network. select ip gateway, and click on the tool cut off Netcut program, the entire network which is on subnet LAN will be disconnected .. seem easy to decide on a network….

    how to prevent and security


  • Rebel Alliance Developer Netgate

    That has to be secured at the switch (layer 2) level.

    That, or use static arp and hardcode everyone's MAC address.


Locked