[wplug] RARP

[James O'Kane]

Every once in a while you should see arp packets.
With tcpdump they look like this:
22:16:25.207104 arp who-has dhcp-213.midnightlinux.com tell lal.midnightlinux.com
22:16:25.207394 arp reply dhcp-213.midnightlinux.com is-at 0:1:3:ea:40:25
They might look different with whatever tool you're using.


If the linux machine is on the same network, which I'm fairly sure it has
to be for it to be able to convert mac addresses to IP's, you can look at
the arp table with /sbin/arp, and if the machine is on the same network,
can you just run tcpdump to get the info you want?


-james