US5708654A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method for detecting proxy ARP replies from devices in a local area network
Assignee: Linkrunner LLC
•
Filing: 1996-11-27
•
Granted: 1998-01-13
•
Expires: 2016-11-27
Abstract
Abstract A method in a LAN test instrument for detecting proxy ARP agents and misconfigured routers in a TCP/IP LAN is provided. The method first allows for detection of routers running proxy ARP for the default route by issuing a single ARP command for a unique remote host. Because the target IP address chosen as a unique, non-existent device, the router will respond to the ARP request with a proxy ARP reply for its default route if this function is enabled. The method further allows for distinguishing between responses from actual devices having duplicate IP addresses and responses from misconfigured routers replying in proxy ARP for local hosts. The false duplicate IP addresses due to proxy ARP replies may be identified as phantom entries in a data base that can then be appropriately tagged or eliminated to display only the entries that correspond to actual physical devices to the user of the LAN test instrument.
Inventors
- 👤 Manfred R. Arndt
- 👤 Frank J. Actis
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-27 07:36
CPC Classifications
H; H04; H04L; H04L61/00; H04L61/09; H04L61/10; H04L61/59
Claims Analysis
Total Claims: 18
Claim 1
Independent Claim
166 words
In a LAN test instrument for coupling to a LAN, a method for detecting a misconfigured router, comprising: (a) building a data base containing entries corresponding to devices on said LAN, each of said entries containing a pair of MAC and IP addresses; (b) issuing a first network request to said devices on said LAN corresponding to each of said entries, said first network request allowing no forwarding from a local segment of said LAN; (c) issuing a second network request to said devices on said LAN corresponding to each of said entries, said second network request allowing forwarding from said local segment of said LAN; (d) if there is no reply to said first network request and there is a reply to said second network request for at least one of said entries, detecting a proxy ARP reply for said one of said entries; and (e) if said one of said entries has an IP address corresponding to a local host, detecting said misconfigured router.
Claim 2
Dependent Claim
166 words
In a LAN test instrument for coupling to a LAN, a method for detecting a misconfigured router, comprising: (a) building a data base containing entries corresponding to devices on said LAN, each of said entries containing a pair of MAC and IP addresses; (b) issuing a first network request to said devices on said LAN corresponding to each of said entries, said first network request allowing no forwarding from a local segment of said LAN; (c) issuing a second network request to said devices on said LAN corresponding to each of said entries, said second network request allowing forwarding from said local segment of said LAN; (d) if there is no reply to said first network request and there is a reply to said second network request for at least one of said entries, detecting a proxy ARP reply for said one of said entries; and (e) if said one of said entries has an IP address corresponding to a local host, detecting said misconfigured router.
Claim 3
Dependent Claim
51 words
A method for detecting a misconfigured router according to claim 1 further comprising: (a) obtaining a MAC address of said misconfigured router; (b) obtaining a corresponding IP address of said misconfigured router; and (c) reporting said MAC address and said corresponding IP address to other processes in said LAN test instrument.
Claim 4
Dependent Claim
51 words
A method for detecting a misconfigured router according to claim 2 further comprising: (a) saving said MAC address and said corresponding IP address as an entry in a data base in said LAN test instrument; and (b) identifying other entries in said data base having said MAC address as phantom replies.
Claim 5
Dependent Claim
19 words
A method for detecting a misconfigured router according to claim 1 wherein said LAN operates using a TCP/IP protocol.
Claim 6
Dependent Claim
27 words
A method for detecting a misconfigured router according to claim 4 wherein said first network request comprises an ICMP echo request with a time-to-live equal to one.
Claim 7
Dependent Claim
28 words
A method for detecting a misconfigured router according to claim 4 wherein said second network request comprises an ICMP echo request with a time-to-live substantially greater than one.
Claim 8
Dependent Claim
166 words
In a LAN test instrument for coupling to a LAN containing a plurality of devices, a method for building a data base, comprising: (a) issuing active network requests to each of said devices; (b) receiving responses from said devices according to said active network requests and to passive monitoring of said LAN; (c) adding entries to said data base according to each of said responses; (d) issuing a first network request to devices on said LAN corresponding to each of said entries, said first network request allowing no forwarding from a local segment of said LAN; (e) issuing a second network request to devices on said LAN corresponding to each of said entries, said second network request allowing forwarding from said local segment of said LAN; and (f) if there is no reply to said first network request and there is a reply to said second network request for at least one of said entries, detecting said one of said entries to be a phantom entry.
Claim 9
Dependent Claim
166 words
In a LAN test instrument for coupling to a LAN containing a plurality of devices, a method for building a data base, comprising: (a) issuing active network requests to each of said devices; (b) receiving responses from said devices according to said active network requests and to passive monitoring of said LAN; (c) adding entries to said data base according to each of said responses; (d) issuing a first network request to devices on said LAN corresponding to each of said entries, said first network request allowing no forwarding from a local segment of said LAN; (e) issuing a second network request to devices on said LAN corresponding to each of said entries, said second network request allowing forwarding from said local segment of said LAN; and (f) if there is no reply to said first network request and there is a reply to said second network request for at least one of said entries, detecting said one of said entries to be a phantom entry.
Claim 10
Dependent Claim
21 words
A method for building a data base according to claim 7 further comprising deleting said phantom entry from said data base.
Claim 11
Dependent Claim
22 words
A method for building a data base according to claim 7 further comprising appropriately tagging said phantom entry in said data base.
Claim 12
Dependent Claim
19 words
A method for building a data base according to claim 7 wherein said LAN operates using a TCP/IP protocol.
Claim 13
Dependent Claim
28 words
A method for building a data base according to claim 10 wherein said first network request further comprises an ICMP echo request with a time-to-live equal to one.
Claim 14
Dependent Claim
29 words
A method for building a data base according to claim 10 wherein said second network request further comprises an ICMP echo request with a time-to-live substantially greater than one.
Claim 15
Dependent Claim
118 words
In a LAN test instrument for coupling to a LAN, a method for detecting a router running proxy ARP for its default route, comprising: (a) issuing an ARP request on said LAN for a remote host having a unique IP address; (b) if said router replies to said ARP request, detecting said proxy ARP; (c) obtaining a MAC address of said router; (d) obtaining an IP address corresponding to said MAC address for said router; (e) saving said MAC address and said IP address for said router as an entry in a data base in said LAN test instrument; and (f) identifying other entries in said data base having said MAC address for said router as phantom replies.
Claim 16
Dependent Claim
118 words
In a LAN test instrument for coupling to a LAN, a method for detecting a router running proxy ARP for its default route, comprising: (a) issuing an ARP request on said LAN for a remote host having a unique IP address; (b) if said router replies to said ARP request, detecting said proxy ARP; (c) obtaining a MAC address of said router; (d) obtaining an IP address corresponding to said MAC address for said router; (e) saving said MAC address and said IP address for said router as an entry in a data base in said LAN test instrument; and (f) identifying other entries in said data base having said MAC address for said router as phantom replies.
Claim 17
Dependent Claim
38 words
A method for detecting a router running proxy ARP for its default route according to claim 13 further comprising reporting said MAC address and said IP address for said router to other processes in said LAN test instrument.
Claim 18
Dependent Claim
25 words
A method for detecting a router running proxy ARP for its default route according to claim 13 wherein said LAN operates using a TCP/IP protocol.
References Cited (Backward Citations)
US5309437A
Cited
US5420862A
Cited
US5229988A
Cited
US5517488A
Cited
US5600644A
Cited
US5581552A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-01-12 | 2001-07-14 | 2002-01-13 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-01-12 | 2005-07-14 | 2006-01-13 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-01-12 | 2009-07-14 | 2010-01-13 | $7700.00 | Window Closed / Lapsed |