linux-kernel - netlink messages on ARP events

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <a01763360611150721l4281b2e1j55b26469d79f9c76@mail.gmail.com>
Date:	Wed, 15 Nov 2006 16:21:54 +0100
From:	"Carlo Bellettini" <cbellettini@...il.com>
To:	linux-kernel@...r.kernel.org
Subject: netlink messages on ARP events

Hi,
I'm experimenting with NETLINK_ROUTE socket on 2.6.16 (patched with
mipl - mobile ipv6 for linux), in order to monitor the state of the
arp table.
On kernel 2.6.8, when an entry was - even manually - added or deleted,
a RTM_NEWNEIGH message was sent to the multicast group RTMGRP_NEIGH,
which I'm listening to. On 2.6.16, no such message is sent, except for
IPv6 events.
I compiled 2.6.16 with CONFIG_ARPD and set
"/proc/sys/net/ipv4/neigh/*/app_solicit" to a value > 0, but no luck.
I know there exists NETLINK_ARPD, but it should be used to manage, not
monitor, the arp table (it doesn't support multicast, anyway), if I'm
not wrong. Any suggestion is welcome.

Please CC me, since I did not subscribed the mailing list.

Thank you,

Carlo Bellettini
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/