[PLUG] ATTBI to Comcast switch

Russell Senior seniorr at aracnet.com
Tue Jun 10 13:36:01 UTC 2003


>>>>> "Ken" == Ken Barber <pundit at teleport.com> writes:

Russell> I don't see this behaviour.  When I do a tcpdump on the
Russell> cable-modem interface, all I see is ARP broadcasts, not the
Russell> "client" replies, and not anyone elses traffic.

Ken> That's interesting, you can see Layer 2 packets but nothing any
Ken> higher?  Weird.

Here's a sample:

  # tcpdump -n 
  tcpdump: listening on eth0
  13:29:35.847438 arp who-has 12.225.145.190 tell 12.225.145.1
  13:29:35.898320 arp who-has 12.224.141.59 tell 12.224.140.1
  13:29:35.927603 arp who-has 12.225.200.28 tell 12.225.200.1
  13:29:35.978359 arp who-has 12.224.186.79 tell 12.224.186.1
  13:29:36.245479 arp who-has 12.224.191.26 tell 12.224.191.1
  13:29:36.714694 arp who-has 12.224.118.201 tell 12.224.118.129
  13:29:36.779104 arp who-has 12.224.179.194 tell 12.224.179.1
  13:29:36.784765 arp who-has 12.224.191.32 tell 12.224.191.1
  13:29:36.824609 arp who-has 12.225.144.106 tell 12.225.144.1
  13:29:36.949638 arp who-has 12.224.179.160 tell 12.224.179.1
  13:29:37.142424 arp who-has 10.142.182.55 tell 10.142.176.1
  13:29:37.230696 arp who-has 12.224.137.141 tell 12.224.136.1
  13:29:37.389577 arp who-has 67.160.162.38 tell 67.160.162.1
  13:29:37.440594 arp who-has 12.224.141.12 tell 12.224.140.1
  13:29:37.502057 arp who-has 67.160.161.160 tell 67.160.160.1
  13:29:37.726334 arp who-has 67.160.161.175 tell 67.160.160.1
  13:29:37.740194 arp who-has 12.224.142.191 tell 12.224.142.1
  13:29:38.128180 arp who-has 67.160.162.216 tell 67.160.162.1
  13:29:38.174144 arp who-has 12.224.138.47 tell 12.224.138.1
  13:29:38.889868 arp who-has 12.224.186.79 tell 12.224.186.1
  13:29:39.004568 arp who-has 12.224.138.26 tell 12.224.138.1
  13:29:39.202363 arp who-has 12.225.200.28 tell 12.225.200.1
  13:29:39.465318 arp who-has 12.224.137.141 tell 12.224.136.1
  13:29:39.570690 arp who-has 67.160.161.231 tell 67.160.160.1
  13:29:39.754630 arp who-has 12.224.191.32 tell 12.224.191.1
  13:29:39.764725 arp who-has 12.224.136.28 tell 12.224.136.1
  13:29:39.847745 arp who-has 12.224.191.26 tell 12.224.191.1
  13:29:39.848220 arp who-has 12.224.179.160 tell 12.224.179.1
  13:29:39.904398 arp who-has 12.224.191.86 tell 12.224.191.65
  13:29:40.205002 arp who-has 10.142.169.48 tell 10.142.160.1
  13:29:40.319371 arp who-has 12.224.136.69 tell 12.224.136.1
  13:29:40.500945 arp who-has 67.160.162.38 tell 67.160.162.1
  13:29:40.671537 arp who-has 67.160.160.94 tell 67.160.160.1
  13:29:40.961926 arp who-has 12.225.145.108 tell 12.225.145.1
  13:29:41.083522 arp who-has 12.224.142.191 tell 12.224.142.1
  13:29:41.090176 arp who-has 67.160.162.216 tell 67.160.162.1
  13:29:41.341636 arp who-has 12.224.136.205 tell 12.224.136.1
  13:29:41.361979 arp who-has 12.224.142.82 tell 12.224.142.1
  13:29:41.415069 arp who-has 12.224.139.184 tell 12.224.138.1
  13:29:41.416157 arp who-has 12.224.138.47 tell 12.224.138.1
  13:29:41.646691 arp who-has 12.224.186.103 tell 12.224.186.1
  13:29:41.657215 arp who-has 12.224.143.222 tell 12.224.142.1
  13:29:41.860370 arp who-has 12.225.145.190 tell 12.225.145.1
  13:29:41.870516 arp who-has 12.224.138.26 tell 12.224.138.1
  13:29:41.936255 arp who-has 12.224.186.79 tell 12.224.186.1
  13:29:42.270587 arp who-has 12.224.137.141 tell 12.224.136.1
  13:29:42.295173 arp who-has 12.224.191.26 tell 12.224.191.1
  13:29:42.542441 arp who-has 67.168.216.143 tell 67.168.216.1
  13:29:42.823455 arp who-has 67.160.161.231 tell 67.160.160.1
  13:29:42.830590 arp who-has 12.224.179.160 tell 12.224.179.1
  13:29:42.942676 arp who-has 12.224.138.246 tell 12.224.138.1
  13:29:43.043817 arp who-has 12.224.179.121 tell 12.224.179.1
  13:29:43.199373 arp who-has 12.224.141.228 tell 12.224.140.1
  13:29:43.280741 arp who-has 12.224.191.86 tell 12.224.191.65
  13:29:43.314310 arp who-has 12.224.136.69 tell 12.224.136.1
  13:29:43.327850 arp who-has 67.160.162.26 tell 67.160.162.1
  13:29:43.384939 arp who-has 12.224.136.28 tell 12.224.136.1
  13:29:43.569985 arp who-has 12.225.144.215 tell 12.225.144.1
  13:29:43.619622 arp who-has 12.225.145.146 tell 12.225.145.1
  13:29:43.632299 arp who-has 67.160.160.94 tell 67.160.160.1
  13:29:43.651975 arp who-has 12.224.142.191 tell 12.224.142.1
  13:29:43.768751 arp who-has 67.160.162.216 tell 67.160.162.1
  13:29:43.854965 arp who-has 12.224.142.82 tell 12.224.142.1
  13:29:44.028163 arp who-has 12.224.140.108 tell 12.224.140.1
  13:29:44.349378 arp who-has 12.224.178.149 tell 12.224.178.1
  13:29:44.366457 arp who-has 12.224.143.222 tell 12.224.142.1
  13:29:44.377924 arp who-has 12.224.139.184 tell 12.224.138.1
  13:29:44.380167 arp who-has 12.224.136.205 tell 12.224.136.1
  13:29:44.867071 10.142.160.1.67 > 255.255.255.255.68:  xid:0x7c443322 flags:0x8000 C:12.224.178.55 Y:12.224.178.55 G:10.142.160.1 eth
  er 0:40:5:c5:62:c [|bootp]
  13:29:45.008469 10.142.160.1.67 > 255.255.255.255.68:  xid:0x7c443322 flags:0x8000 C:12.224.178.55 Y:12.224.178.55 G:10.142.160.1 eth
  er 0:40:5:c5:62:c [|bootp]
  13:29:45.202339 arp who-has 10.142.169.48 tell 10.142.160.1
  13:29:45.741582 arp who-has 12.224.137.141 tell 12.224.136.1
  13:29:45.831376 arp who-has 12.224.179.160 tell 12.224.179.1
  13:29:45.936934 arp who-has 12.224.138.246 tell 12.224.138.1
  13:29:46.021926 arp who-has 12.224.143.10 tell 12.224.142.1
  13:29:46.106842 arp who-has 12.225.144.102 tell 12.225.144.1
  13:29:46.125536 arp who-has 12.231.226.38 tell 12.231.226.1
  13:29:46.149776 arp who-has 12.224.141.249 tell 12.224.140.1
  13:29:46.264564 arp who-has 12.224.141.228 tell 12.224.140.1
  13:29:46.286366 arp who-has 67.160.162.26 tell 67.160.162.1
  13:29:46.310181 arp who-has 12.224.142.82 tell 12.224.142.1
  13:29:46.366784 arp who-has 12.224.138.236 tell 12.224.138.1
  13:29:46.379273 arp who-has 12.224.191.86 tell 12.224.191.65
  13:29:46.387359 arp who-has 67.160.161.73 tell 67.160.160.1
  13:29:46.511941 arp who-has 12.225.144.215 tell 12.225.144.1
  13:29:46.565700 arp who-has 12.224.143.222 tell 12.224.142.1
  13:29:46.579754 arp who-has 12.225.145.146 tell 12.225.145.1
  13:29:46.582214 arp who-has 12.224.186.103 tell 12.224.186.1
  13:29:46.626488 arp who-has 12.224.140.104 tell 12.224.140.1
  13:29:46.689160 arp who-has 12.224.139.124 tell 12.224.138.1
  13:29:46.733228 arp who-has 67.160.162.216 tell 67.160.162.1
  13:29:46.772938 arp who-has 12.225.145.18 tell 12.225.145.1
  13:29:46.783800 arp who-has 12.224.142.191 tell 12.224.142.1
  13:29:46.784274 arp who-has 12.224.136.184 tell 12.224.136.1
  13:29:46.977982 arp who-has 12.224.140.108 tell 12.224.140.1
  13:29:47.371417 arp who-has 12.224.178.149 tell 12.224.178.1
  13:29:47.474867 arp who-has 12.224.136.205 tell 12.224.136.1
  13:29:47.643887 arp who-has 12.224.191.26 tell 12.224.191.1
  13:29:48.163292 arp who-has 12.224.142.230 tell 12.224.142.1
  13:29:48.204341 arp who-has 12.224.178.195 tell 12.224.178.1
  13:29:48.410062 arp who-has 12.224.186.182 tell 12.224.186.129
  13:29:48.427135 arp who-has 67.160.162.67 tell 67.160.162.1
  13:29:48.680041 arp who-has 12.224.137.141 tell 12.224.136.1
  13:29:48.919819 arp who-has 12.225.145.66 tell 12.225.145.1
  13:29:49.035653 arp who-has 12.225.144.102 tell 12.225.144.1
  13:29:49.080092 arp who-has 12.231.226.38 tell 12.231.226.1
  13:29:49.116900 arp who-has 12.224.143.10 tell 12.224.142.1
  13:29:49.299765 arp who-has 12.224.191.86 tell 12.224.191.65
  13:29:49.318765 arp who-has 12.224.136.69 tell 12.224.136.1

  109 packets received by filter
  0 packets dropped by kernel

I never see anyone elses traffic.  That's not to say that with
appropriate hardware you couldn't, but I don't think that equipment is
widely deployed.  Casual snooping by neighbors seems quite unlikely
these days.


-- 
Russell Senior          ``Rome is strangling my people and my country... the
seniorr at aracnet.com       whole earth.  But not forever!  I tell you, the day
                          Rome falls there will be a shout of freedom such as
                          the world has never heard before.'' -- Ben Hur




More information about the PLUG mailing list