1
2
3
4
5
6
7
8
9
10
11
12
| root@eddie:~# tcpdump -i xl1 -en arp
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on xl1, link-type EN10MB (Ethernet), capture size 96 bytes
14:07:59.991955 00:16:01:fb:c0:42 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: arp who-has 92.247.243.79 tell 1.1.1.1
14:08:00.010110 00:16:01:fb:c0:42 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: arp who-has 77.71.14.171 tell 1.1.1.1
14:08:00.040147 00:16:01:fb:c0:42 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: arp who-has 212.5.32.252 tell 1.1.1.1
14:08:00.040177 00:16:01:fb:c0:42 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: arp who-has 87.254.169.41 tell 1.1.1.1
14:08:00.410212 00:16:01:fb:c0:42 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: arp who-has 82.7.244.193 tell 1.1.1.1
14:08:00.410244 00:16:01:fb:c0:42 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: arp who-has 89.38.1.72 tell 1.1.1.1
14:08:00.460462 00:16:01:fb:c0:42 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: arp who-has 92.232.114.92 tell 1.1.1.1
14:08:00.490200 00:16:01:fb:c0:42 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: arp who-has 82.2.88.210 tell 1.1.1.1
14:08:00.490231 00:16:01:fb:c0:42 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: arp who-has 89.215.227.133 tell 1.1.1.1
|