Kristiadi Himawan wrote: > > So is there a technique to filter this kind of ARP traffic ? > > 17:16:53.740978 arp who-has 192.43.165.29 tell 192.43.165.30 > 17:16:53.752482 arp reply 192.43.165.29 is-at 00:04:c1:b5:bd:f1 > 17:16:53.812889 arp who-has 192.43.162.194 tell 192.43.162.193 > 17:16:53.812922 arp reply 192.43.162.194 is-at 00:08:c7:c9:a3:17 > > Anyone can help? This works for me: http://duron/lartc/arp.html > # Example that matches ARP (a big "thank you" to Martin Brown for this!): > # the ARP protocol is 2 bytes at -2 > # the "0806" comes from linux/include/linux/if_ether.h > tc filter add dev $DEV parent 1: protocol ip prio 5 u32 \ > match u16 0x0806 0xffff at -2 flowid 1:50 -- gypsy _______________________________________________ LARTC mailing list LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
