Re: [Full-Disclosure] Re: Cain and Abel

From: Piw (piw_at_e-liberty.pl)
Date: 02/07/05

  • Next message: Turbolinux: "[Full-Disclosure] [TURBOLINUX SECURITY INFO] 07/Feb/2005" 
    Date: Mon, 07 Feb 2005 10:51:50 +0100
To: full-disclosure@lists.netsys.com

    Nick Vasiliev wrote:

    > I have tried to set up static arp mappings on my system however the
    > new ones overwrote the old ones. Also I am not sure but does it also
    > screw with switch's arp tables or just the client ones? Any feedback
    > would be nice

    Yes, such attack re-map port<->mac pair in "plain" switches.
    Static arp entries are _static_ (unchangable) for Linux.
    For Windows, Windows XP is first MS system that treat static as real
    static - in previous versions "static" means that is times-out not so
    often (but could be changed)
    For other OSes? dunno.

    Piw

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Turbolinux: "[Full-Disclosure] [TURBOLINUX SECURITY INFO] 07/Feb/2005"

    Relevant Pages

    • Re: [Fwd: Re: Properly Arp Cache Poisoning]
      ... Windows OS can be configured in the Registry settings not to accept ... Using ICMP and ARP. ... The OS used on both, the Laptop and Desktop, is Windows Vista 64. ... ARP cache poisoning attack). ...
      (Pen-Test)
    • Re: SMBRelay issues
      ... Check out phenoelit's ARP 0c Connection Interceptor ... I've not used this tool in a windows ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
      (Pen-Test)
    • Ethernet help, please...
      ... I've got an older AT PC running windows. ... the NIC works fine in windows, it does not work at all in Linux!!! ... Added the MAC ... addresses to the arp table. ...
      (comp.os.linux.networking)
    • Re: How to use nmap to discover IPs and mac addresses.
      ... Windows system, I normally use Advanced IP Scanner ... then I use arp -a to list the mac addresses. ... Is it possible to use nmap to perform the same function in Linux and ... that only tells you the contents of the current arp table for that system. ...
      (comp.os.linux.networking)
    • RE: firewall 1 help
      ... A common gotya is the flawed proxy arp ... running on Windows NT ... arp -s <MAC address of firewall external IP> ...
      (Security-Basics)