This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
Home Products Support Community News


RE: [Xen-users] ARP-Spoofing + Xen Network script ???

To: Patrick Straub <pastraub@xxxxxxxxxxxxxxxx>, "xen-users@xxxxxxxxxxxxxxxxxxx" <xen-users@xxxxxxxxxxxxxxxxxxx>
Subject: RE: [Xen-users] ARP-Spoofing + Xen Network script ???
From: Nathan Eisenberg <nathan@xxxxxxxxxxxxxxxx>
Date: Tue, 20 Oct 2009 20:35:22 -0700
Accept-language: en-US
Acceptlanguage: en-US
Delivery-date: Tue, 20 Oct 2009 20:37:36 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to: <1256057414.12002.5.camel@fuwa>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <1256057414.12002.5.camel@fuwa>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
Thread-index: AcpRpVyNteCm+OBYTjCuDtgXV9bdLwAWZolg
Thread-topic: [Xen-users] ARP-Spoofing + Xen Network script ???
> -----Original Message-----
> From: xen-users-bounces@xxxxxxxxxxxxxxxxxxx [mailto:xen-users-
> bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Patrick Straub
> Sent: Tuesday, October 20, 2009 9:50 AM
> To: xen-users@xxxxxxxxxxxxxxxxxxx
> Subject: [Xen-users] ARP-Spoofing + Xen Network script ???
> Hi xenusers,
> is it possible to do a ARP-Spoof from a VM lets say DomU1 and the Dom0
> ?
> I'm currently using Xen in routed-mode which means that every DomU has
> its own ip-address and packets will be forwarded on the Dom0.
> I've tested a simple ARP-Spoof within my DomU. I've tried to tell the
> Dom0 that I'm now the gateway to forward the traffic on. So I did the
> following command:
>       arpspoof -t "dom0-ip" "gw-ip"
> But there was no effect?
> Does anybody know why this is so? It seems that Dom0 is not accepting
> any ARP-Pakets from the Userdomains but why and how?
> Thx for any answer on this.
> greetings
> Patrick

I'd guess that your dom0 isn't arping for the gateway to the vif, but without 
more information, it's impossible to say.

If your Dom0's eth0 is, and your vif0 is, your dom0 isn't 
going to send an ARP for on vif0 - that doesn't make sense to the 
routing table.

Best Regards,
Nathan Eisenberg

Xen-users mailing list

<Prev in Thread] Current Thread [Next in Thread>