RE: ARP-SPOOFING

From: shannong (shannong@texas.net)
Date: 09/10/02 

From: "shannong" <shannong@texas.net>
To: <focus-ids@securityfocus.com>
Date: Tue, 10 Sep 2002 12:40:53 -0500

Some IDS do watch for this via "arp flip-flop". In otherwords, a MAC
was associated with one IP, then suddenly another IP. DHCP in a Win2k
environment is basically "static" as long as you have enough Ips. A
workstation will always pull the same IP address from DHCP based on MAC
unless it ran out of Ips and handed out to a new client who didn't
already have an IP previously.

-----Original Message-----
From: Falcifer [mailto:falcifer2001@yahoo.es]
Sent: Monday, September 09, 2002 10:37 AM
To: focus-ids@securityfocus.com
Subject: ARP-SPOOFING

hi
How can i detect an arp-spoofing in a environmet with a dynamic IP? Does
cablemodem operators usually install IDS? where?

Thanks _______________________________________________________________

Copa del Mundo de la FIFA 2002

El único lugar de Internet con vídeos de los 64 partidos.

¡Apúntante ya! en http://fifaworldcup.yahoo.com/fc/es/

Relevant Pages

  • Re: Wired security improvements
    ... I have a lot of experience with 802.1x in a wireless environment and it ... option than MAC Authentication via RADIUS as far as security is concerned, ... it can only provide a weak form of network authentication. ...
    (Security-Basics)
  • Re: Preventing DHCP from allocating IPs
    ... Each segment is physically separate with a Linux ... unknown MAC addresses firstly don't get a DHCP ... >> wants access to your network, they will have to come to you to obtain ...
    (Security-Basics)
  • Re: Secure your DHCP
    ... I can only think of allocating via dhcp reservation using network card ... Create an exclusion of your whole DHCP scope (So no IP's are free to be ... assign each mac address an Ip address from what was in your pool. ...
    (microsoft.public.windows.server.sbs)
  • Re: static IP addresses on LAN
    ... One Mac is an intel iMac, ... it is connected to the network and internet... ... If I instead configure it to use DHCP, then it gets assigned the wrong IP ... The other possibility is that you have more than 1 router. ...
    (comp.sys.mac.system)
  • Re: works on desk computer but not on wireless laptop
    ... RARP server, the DHCP server, or manually? ... So I chose that and now it wants to know the DHCP Client ID. ... And a 12 character number like a Mac ID. ... The OEM computer MAC address is the same as the DHCP ...
    (alt.internet.wireless)