No ARP response

30 views
Skip to first unread message

gdr...@gmail.com

unread,
May 29, 2017, 4:54:34 AM5/29/17
to qubes-users
Hi,

I created a Kali Linux HVM from a bootable ISO image.

So far, all is fine.

sys-net2 is the VM that controls network and the HVM is connected to the network via the default sys-firewall2.

$ ping 192.168.XX.XX
PING 192.168.XX.XX (192.168.XX.XX) 56(84) bytes of data.
64 bytes from 172.30.160.217: icmp_seq=1 ttl=62 time=1.37 ms
64 bytes from 172.30.160.217: icmp_seq=2 ttl=62 time=1.03 ms
^C
--- 192.168.XX.XX ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 1.033/1.205/1.378/0.175 ms

I have a problem. Using ARP Scan Tool (arp-scan binary), there no ARP reply (sent in response to the ARP request).

$ arp-scan 192.168.XX.XX

Interface: eth0, datalink type: EN10MB (Ethernet)
Starting arp-scan 1.9 with 1 hosts (http://www.nta-monitor.com/tools/arp-scan/)
192.168.XX.XX fe:ff:ff:ff:ff:ff (Unknown)

1 packets received by filter, 0 packets dropped by kernel
Ending arp-scan 1.9: 1 hosts scanned in 0.636 seconds (1.57 hosts/sec). 1 responded

How can I fix it ?

Thanks so much.

Best regards,

Alex

unread,
May 29, 2017, 6:09:54 AM5/29/17
to qubes...@googlegroups.com
It would be a nice networking problem (even before the security
implications) if ARP packets could cross network boundaries (e.g.
routers like sys-net). Your situation is not a problem, it's a feature
of the ARP protocol and, more generally, the way networking rolls...

If you want the most from your Kali Linux machine you should forward a
physical network card to the HVM, without any intermediaries. This way
the tools can directly read and write network packets, and if the
adapter is wireless they can turn on custom modes.

--
Alex

signature.asc

gdr...@gmail.com

unread,
May 29, 2017, 7:31:57 AM5/29/17
to qubes-users, gdr...@gmail.com
Thx Alex.

The problem is not related to this post (enable proxy arp on Linux) : https://groups.google.com/forum/#!msg/qubes-users/lA2SgPcV9fU/PjMj_UE8CAAJ ?

Alex

unread,
May 29, 2017, 8:03:14 AM5/29/17
to qubes...@googlegroups.com
You can also solve your specific situation by enabling ARP proxy, but if
you're trying to experiment with Kali Linux instead of just wanting to
just reach a gateway, you'd want to have a NIC that is fully devoted to
Kali.

--
Alex

signature.asc
Reply all
Reply to author
Forward
0 new messages