[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#625796: marked as done (arpwatch: VLAN-tagged packets generate "sent bad hardware format" syslog messages)

Your message dated Mon, 10 Apr 2017 11:48:49 +0000
with message-id <E1cxXoP-000DYc-M0@fasolo.debian.org>
and subject line Bug#625796: fixed in arpwatch 2.1a15-3
has caused the Debian Bug report #625796,
regarding arpwatch: VLAN-tagged packets generate "sent bad hardware format" syslog messages
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
625796: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=625796
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: arpwatch
Version: 2.1a15-1.1
Severity: important
Tags: upstream

When running arpwatch on a plain Ethernet interface when packets with 802.1Q
VLAN tags are present, arpwatch syslogs an error of the form:

sent bad hardware format ...

for each and every incoming ARP packet with a VLAN tag. The problem seems to be
that pcap
recognizes tagged as well as untagged ARP packets and passes them to arpwatch
with the 802.1Q VLAN tags present. Since the 802.1Q tag inserts 32 bits between
the MAC source address and the original Ethernet type field (0x806), the ARP
data fields are not
where arpwatch expects to see them.

I would patch this myself except that I'm not sure what the correct fix should
be. Should arpwatch discard tagged ARP packets entirely? Or should it strip
802.1Q tags and process the subsequent ARP data fields as though the packet had
not been
tagged in the first place?



-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.38.4-homer (SMP w/8 CPU cores; PREEMPT)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash

Versions of packages arpwatch depends on:
ii  adduser                       3.112+nmu2 add and remove users and groups
ii  libc6                         2.11.2-11  Embedded GNU C Library: Shared lib
ii  libpcap0.8                    1.1.1-3    system interface for user-level pa

arpwatch recommends no packages.

arpwatch suggests no packages.

-- Configuration Files:
/etc/arpwatch.conf changed [not included]
/etc/default/arpwatch changed [not included]

--- End Message ---
--- Begin Message --- 
Source: arpwatch
Source-Version: 2.1a15-3

We believe that the bug you reported is fixed in the latest version of
arpwatch, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 625796@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Lukas Schwaighofer <lukas@schwaighofer.name> (supplier of updated arpwatch package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Thu, 06 Apr 2017 20:08:51 +0200
Source: arpwatch
Binary: arpwatch
Architecture: source amd64
Version: 2.1a15-3
Distribution: experimental
Urgency: low
Maintainer: Debian Security Tools Packaging Team <pkg-security-team@lists.alioth.debian.org>
Changed-By: Lukas Schwaighofer <lukas@schwaighofer.name>
Description:
 arpwatch   - Ethernet/FDDI station activity monitor
Closes: 155182 625796 686996 728921 756062
Changes:
 arpwatch (2.1a15-3) experimental; urgency=low
 .
   * maintain arpwatch as part of the pkg-security team
     (Closes: #686996)
   * add missing dependency on lsb-base
   * bump Standards version (no change needed)
   * netinet/if_ether.h is part of libc6-dev (Closes: #155182)
   * ignore 802.1q (vlan) frames (Closes: #625796)
   * clarify unconfigured iface message (Closes: #756062)
   * initialize ignore_net properly.
     Thanks to Lucas Serrano (Closes: #728921)
   * move LSB init script from init.d to arpwatch.init
   * add systemd unit files
   * install additional arpwatch@.service unit file
   * no more /etc/arpwatch.conf, add README with instructions
   * adjust LSB startup for new configuration format
   * turn on additional hardening
   * explain upstream differences in README.Debian
   * explain what to do on upgrade in NEWS
   * fix configure.in/aclocal.m4 errors for autoreconf
   * use debhelper compatibility level 10
   * use ethercodes from ieee-data; override the ethercodes.dat lintian warning
     (only part of the source and no longer used in the binary package)
   * massagevendor needs GNU awk, minor fixes
   * disable backup in preinst + restore in postinst
   * remove dmassagevendor, a script that allows creating a ethercodes
     database from multiple sources (arpwatch now uses ieee-data)
   * patch Makefile.in to create the required sbin directory
Checksums-Sha1:
 cde556c7dee07ff981e9aa67100977b9736a361d 1973 arpwatch_2.1a15-3.dsc
 fade82eb5d2699c18d366b28b2085906a24e45aa 29984 arpwatch_2.1a15-3.debian.tar.xz
 487227bd9b9b1e0d8fb2797b00591949b5186034 65212 arpwatch-dbgsym_2.1a15-3_amd64.deb
 07316cecd72d743aea30edce62428da01f704d65 5654 arpwatch_2.1a15-3_amd64.buildinfo
 0056305bec6f6633b225a4ec7547855b33f5b9a6 45280 arpwatch_2.1a15-3_amd64.deb
Checksums-Sha256:
 416ddc0382a615ab1c4b5f3fd6a04ff0f7372885d87a7383bea5494a102b3468 1973 arpwatch_2.1a15-3.dsc
 1201f9869df807c014cea4d74fee609dd839d527087b64562962a911661f16cc 29984 arpwatch_2.1a15-3.debian.tar.xz
 861b9ba40554d88e6331c658352bcfc6ba4838419b4eca1f9ffc350564405275 65212 arpwatch-dbgsym_2.1a15-3_amd64.deb
 5e1b178abf6332477fbc4719711a6e12330130aacb261b2ffe572fc3a97bba4b 5654 arpwatch_2.1a15-3_amd64.buildinfo
 f3a3e57cd67ae0a7db681adedd5e973a692b333fce8d5c5a9efdc4970d28e688 45280 arpwatch_2.1a15-3_amd64.deb
Files:
 e80fa279b32496f925fd726378c501f0 1973 admin optional arpwatch_2.1a15-3.dsc
 10292e4cff6bf10f7863e1bf671d4b2a 29984 admin optional arpwatch_2.1a15-3.debian.tar.xz
 dba8f0a4297a6e438212ae69d30e4b63 65212 debug extra arpwatch-dbgsym_2.1a15-3_amd64.deb
 dfcbb5442a39661e6b0d77e2ba262e8a 5654 admin optional arpwatch_2.1a15-3_amd64.buildinfo
 e51f16c3a636e9ddaa6a94f6b0409b82 45280 admin optional arpwatch_2.1a15-3_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=eoNZ
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: