[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] Static ARP Replies?

Dan Taylor, Jr. wrote:

Here's what happens on one of these networks:

Say the AP's MAC address is DE:AD:C0:DE:CA:FE, with the IP of
192.168.1/255.255.255.0, and I send out an ARP request for hosts
192.168.1.2-254.

Say my MAC address is FE:ED:FA:CE:BE:EF, with the IP address of 192.168.1.100
--> ARP broadcast (source FE:ED:FA:CE:BE:EF destination FF:FF:FF:FF:FF:FF)
--> Who has 192.168.1.2?  Tell 192.168.1.100

--< ARP Reply (source DE:AD:C0:DE:CA:FE, destination FE:ED:FA:CE:BE:EF)
--< 192.168.1.2 is at DE:AD:C0:DE:CA:FE



From the information you've posted, I have no reason to assume that the AP's IP isn't 192.168.1.2, and that this isn't normal behavior.

Clarify? What's the IP of the AP? Okthx.



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html