[Winpcap-users] Rarp Packets !?

winpcap winpcap at onemangang.dk
Thu Oct 13 10:20:34 GMT 2005


Hi everyone.

This might not be the correct place for this, but here it goes.
I have made a little program using winpcap to send rarp packets,
to find out the ip address of a specific mac address.

When i have assembled my rarp packet i send it via winpcap.
I am using ethereal to check if my packets are correctly put together,
and according to ethereal, they is. The packets that i send can nicely be
seen in ethereals window, with the correct addresses and opcodes.

Now, the problem is that i never get a reply.
According to rfc 903 rarp is mostly used for diskless systems to find
out their ip when they boot.

I have tried any combination of arp/rarp type (0x0806 and 0x8035) and
any of the opcodes (1..4).

Now, the question remains, are normal workstations/servers not supposed
to answer rarp packets? I have a mixed environtment with 50++ computers,
windows workstations, windows servers and linux servers...
None of these answer my rarp packets.

Hopefully someone can shed some light on this.
Thanks.

J. Thomsen, Denmark.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20051013/c3d7a690/attachment.htm


More information about the Winpcap-users mailing list