The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
2answers
83 views

Arp attack on my network

We have a small network of around 100 laptop/desktops and around 20 servers (sounds an overkill but these servers provide service for all our external contractors too) and we have recently noticed ...
1
vote
1answer
32 views

xen project - bridged interface shows 2 MACs

I have a simple xen project 4.1 setup running on debian wheezy dom0. I have noticed during a network scan that a domU gateway returned 2 mac addresses for the same IP. One MAC being the expected, ...
0
votes
0answers
98 views

dlink arp spoofing prevention

Can someone can help me understanding arp spoofing prevention on Dlink dgs-3100. I'd like to protect my gateway MAC/IP from spoofing so I have tried to add a rule "IP: 192.168.1.1 MAC: ...
3
votes
1answer
347 views

Windows Server 2008 ARP Cache Poisioning

Recently ran into a very strange problem. Several applications were having issues communication through our F5 Load-Balancer. When we looked into it we found that the router had an incorrect ARP and ...
0
votes
2answers
922 views

Man-In-The-Middle with a VPN?

I'm doing some researches for university and, before wasting a lot of time into it, I'd like to know if what I've got in my mind can be done. I'm talking about a simple MITM attack but, in my ...
1
vote
2answers
327 views

Protection from ARP spoofing

I'm running Linux and I know my gateway will always be 192.168.1.254 with MAC address aa:aa:aa:aa:aa:aa. Is there any way I can instruct my machine to only ever use this MAC address for the gateway ...
1
vote
0answers
180 views

stop arp poisoning on a 5448 powerconnect switch

We have to disable arp poisoning on our dell 5448 switch. Right now it has all our production machines running on it and I'm not a networking guy at all so I don't want to run a command that will ...
1
vote
0answers
107 views

Ettercap duplicate traffic

I have a ARM device(Guruplug) and i want it to perform an ARP spoofing attack on the network. This device has 2 ethernet interfaces and 1 Wireless acces point. I want to plug this device in a ...
2
votes
2answers
290 views

Will a host accept any ARP response it gets and updates its cache

I am trying to understand ARP and ARP cache poisoning. Will a host updates its cache if it gets an ARP response even if it didnt send a request? If yes, is there any particular reason it is designed ...
2
votes
4answers
752 views

Extremely high arp fllooding from the router

My subnet is 10.162.0.0/16. We have a router with a couple of interfaces. Gateway for my subnet is 10.162.0.1. The router is situated in another building and I haven't direct access to it. Line from ...
0
votes
2answers
204 views

ARP requests, etc.

I'm trying to run arp spoofing on a network. I've been working on this for about a week, and all the information I find is dated year 2000-2001. My issue is, after testing a script that uses ...
0
votes
1answer
61 views

Wireless ARP make network unusable rather than capturing a packet

I try to do arp-poisoning on my wireless network using ethercap (same method as using on wired). It make the victim network unusable rather than forward packet to attacker computer. Why ?
2
votes
4answers
370 views

ARP packets never routed?

is it true ARP only works in single broadcast domain and arp packets are not routed frm 1 network to another ? can any one give me any example or any source of info for this hoping for positive ...
0
votes
1answer
538 views

CISCO: ARP Poisoning Countermeasures

How can I prevent the Cisco Catalysts 2950/2960/3550/3750 from being vulnerable to ARP Poisoning? Can this be avoided with the ARP INSPECTION? Thanks
2
votes
5answers
910 views

A strange arp issue

I have a problem with one of our solaris servers, an arp table entry is changing every so often for one of the other servers (WINSERVER) on the network. It will start out with the correct MAC address ...
3
votes
2answers
11k views

How to prevent / detect ARP poison rooting attacks?

Although we have not had any first-hand experience with these kind of attacks (as far as we know of) I would like to know how to prevent them from happening as much as possible. I mostly use my ...