Arping with MAC Address Argument failure

[john99]

Hi all!

I try to find with BT5r2/AWUS036h duplicate replies with 'Arping -c 5 11:22:33:44:55:66' but got the following error messages:


arping: libnet_init(): unknown physical layer type 0x323 (in monitor mode)

and

arping: libnet_get_ipaddr4(libnet): libnet_get_ipaddr4(): ioctl(): cannot assign requested address (in managed mode)


Any idea what I am doing wrong?

Thank's a lot for any help!

John



PS
I am using the Arping-version from Thomas Habets. http://www.habets.pp.se/synscan/prog...hp?prog=arping

[thorin]

Try without the colons.

[john99]

Try without the colons.

Thank's a lot thorin for the reply! I tried it with 'Arping 11:22:33:44:55:66' but got the same/following error messages:


arping: libnet_init(): unknown physical layer type 0x323


Best regards,

John

[Snayler]

Thank's a lot thorin for the reply! I tried it with 'Arping 11:22:33:44:55:66' but got the same/following error messages:


arping: libnet_init(): unknown physical layer type 0x323


Best regards,

John

What Thorin said was to try it without the colons --> ":"

Like this:

Arping -c 5 112233445566

[thorin]

1) Try what I suggested originally (in managed mode).

2) Heh, idea two (which I shoulda caught earlier) if your NIC is in monitor mode how are you expecting it to talk on a network to do an arping? Which network are you expecting it to use?

[john99]

Thank's a lot for the feedback! Ok, I promise to forget monitor mode!

'Arping' a PC(NT4) on the LAN(eth0) work's perfectly :-) But trying afterwards to 'Arping 11:22:33:44:55:66' and AP or a connected client(wlan1, AWUS036h with rtl8187 driver)
failes with the following message:

25 packets transmitted, 0 packets received
100% unanswered

Same situation to all visible(airodump-ng in monitor mode:-) WLAN APs and their connected clients...


Thank's in Advance for addtitional feedback!

John


PS:
'Arping -c 5 112233445566'
arping: Can't resolve 112233445566

[deviney]

i have the same problem with my AWUS036h and not been able to fix it unfurtantly

[thorin]

When you arp the NT4 client are you on the same router that's your AP? (i.e. your AP has both wired and wireless connections)? If so can you ARP a wireless client from the wired network? Can you ARP the router/AP?

[john99]

-> When you arp the NT4 client are you on the same router that's your AP?
No. My AP is broken and not in use at the moment. Because in the past, my neighbour was trying to log into my old AP with a faked MAC-address
(the MAC of my own WLAN client), I started to explore arping (I did never associate with that AP).

John