1
edit
Changes
no edit summary
Disabling ARP on a network interface can be used to prevent a high-security server from being accessed by unauthorized hosts. While this is to some extent 'security through obscurity', in practice it is dificult to guess the MAC address of the desired host if it refuses to respond to one's ARP requests.
'''7. Describe the procedure you used in determining the life time of an ARP cache entry on a Linux system.'''
* Turn on two linux machines and get it's ip address and mac address
* In computer A, erase all the arp table
# ifconfig eth0 -arp
# ifconfig eth0 arp
* ping -c 1 <computer B>;date;script;date
''The function of the script is to keep reading the output of the arp cache (arp -n command) each second until the mac address of the computer B disappear''