This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
Home Products Support Community News


[Xen-users] ARP-Spoofing + Xen Network script ???

To: xen-users@xxxxxxxxxxxxxxxxxxx
Subject: [Xen-users] ARP-Spoofing + Xen Network script ???
From: Patrick Straub <pastraub@xxxxxxxxxxxxxxxx>
Date: Tue, 20 Oct 2009 18:50:14 +0200
Delivery-date: Tue, 20 Oct 2009 09:50:23 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
Hi xenusers,

is it possible to do a ARP-Spoof from a VM lets say DomU1 and the Dom0 ?
I'm currently using Xen in routed-mode which means that every DomU has
its own ip-address and packets will be forwarded on the Dom0.

I've tested a simple ARP-Spoof within my DomU. I've tried to tell the
Dom0 that I'm now the gateway to forward the traffic on. So I did the
following command:
        arpspoof -t "dom0-ip" "gw-ip"

But there was no effect?

Does anybody know why this is so? It seems that Dom0 is not accepting
any ARP-Pakets from the Userdomains but why and how?

Thx for any answer on this.


Xen-users mailing list

<Prev in Thread] Current Thread [Next in Thread>