0
votes
1answer
55 views

what would happen when macchanger to gateway mac address? [closed]

I thought arpspoof GATEWAY_IP -t VICTIM_IP can be prevented by add a static arp entry on victim side, i.e. arp -s GATEWAY_IP GATEWAY_MAC I read ...
1
vote
2answers
284 views

Protection from ARP spoofing

I'm running Linux and I know my gateway will always be 192.168.1.254 with MAC address aa:aa:aa:aa:aa:aa. Is there any way I can instruct my machine to only ever use this MAC address for the gateway ...
2
votes
2answers
106 views

What happens if two machines respond to an ARP “who is” request?

I am only recently learning about the nuances of networking, but if a malicious user responded to an ARP "who is" when they should not have, what happens?
2
votes
2answers
86 views

Need confirmation on layer 2 security question

I need confirmation on a question regarding layer 2 security. I've been doing research and I just need to know that I understand it correctly. Basically, if you have a LAN with a few machines ...
2
votes
4answers
348 views

ARP packets never routed?

is it true ARP only works in single broadcast domain and arp packets are not routed frm 1 network to another ? can any one give me any example or any source of info for this hoping for positive ...
0
votes
1answer
510 views

CISCO: ARP Poisoning Countermeasures

How can I prevent the Cisco Catalysts 2950/2960/3550/3750 from being vulnerable to ARP Poisoning? Can this be avoided with the ARP INSPECTION? Thanks
1
vote
1answer
728 views

Using arpwatch to backtrack proxy access ip to eap-tls certificate

In my network I am using eap-tls authentication (machine certificates) for clients. Those clients are using a squid proxy to access the internet. The proxy is logging the request to the access.log. ...
1
vote
5answers
1k views

Bypassing VLAN with known MAC address

I am evaluating subneting our network with a Layer 2 switch and VLAN. From what I know, VLAN only works on broadcast domain, and if I know the MAC address of a remote computer on the same switch, I ...
3
votes
2answers
11k views

How to prevent / detect ARP poison rooting attacks?

Although we have not had any first-hand experience with these kind of attacks (as far as we know of) I would like to know how to prevent them from happening as much as possible. I mostly use my ...