Re: Why no printk for duplicate IPs?

Peter Benie (pjb1008@cam.ac.uk)
Thu, 30 Sep 1999 10:50:09 +0100


Marc Merlin writes ("Re: Why no printk for duplicate IPs?"):
> On mer, sep 29, 1999 at 11:47:29 +0100, Alan Cox wrote:
> > > So, is it correct that for IPv4, linux won't report the fact that
> > > another machine is answering ARP requests for one of its IPs?
> > ARP Replies are unicast
>
> good point.
>
> However, at least Solaris, Irix and 95/NT give you a warning when someone
> steals your IP (at runtime, not ifconfig time).
> I suppose they do an ARP request on their own IP after answering an ARP
> request themselves, and watch for an answer.
>
> Any reason we can't do that?

An alternative approach is to log when we receive a broadcast IP from an
external interface which is apparently from one of our own addresses.

Peter

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/