Skip to content

Question about 0.3.2 ARP attack #2

@tarihub

Description

@tarihub

Hello, may I ask a question?
In " arp -a -n | awk '{++S[$4]} END {for(a in S) {if($2>1) print $2,a,S[a]}}' "
Why is it to judge $2 > 1 to judge the existence of arp attack?

According to the characteristics of the arp attack, the judgment condition should not be the same mac address corresponding to different IPs?

Could you tell me that the meaning of $2 (IP) and 1 comparison?

Thank you!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions