Re: arpwatch

From: zidan (zidan00_at_fastmail.fm)
Date: 09/11/03

  • Next message: David Gillett: "RE: Need help from a group of experts. I am not a network expert but I play one on tv." 
    To: Gunter.Luyten@student.kuleuven.ac.be
Date: Thu, 11 Sep 2003 10:28:46 -0800

    I don't agree, arp requests are broadcasts. but response is not
    broadcast, its unicast.
    the answering source to the asking destination.

    what I don't understand, is how can the arpwatch station can see this
    packet if this is a switched network

    -Z 

    -- 
  zidan
  zidan00@fastmail.fm
-- 
http://www.fastmail.fm - A fast, anti-spam email service.
---------------------------------------------------------------------------
Captus Networks 
Are you prepared for the next Sobig & Blaster? 
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans 
 - Precisely Define and Implement Network Security 
 - Automatically Control P2P, IM and Spam Traffic 
FIND OUT NOW -  FREE Vulnerability Assessment Toolkit 
http://www.captusnetworks.com/ads/42.htm
----------------------------------------------------------------------------
  • Next message: David Gillett: "RE: Need help from a group of experts. I am not a network expert but I play one on tv."

    Relevant Pages

    • Re: IBM TV network--a history twist
      ... > Why do you assume the TV broadcasts would have been available to the ... Note that AT&T developed radio equipment for use in the telephone ... It's entirely possible IBM would have developed an experimental TV ... station and network as a test bed for new technologies and ending up as ...
      (rec.arts.tv)
    • Re: AD between sites, but no local DC
      ... > We have 5 branch offices and 1 main office. ... Not knowing anything about your network, what I can say is if there are more ... As far as broadcasts, no, AD does not use broadcasts, (I'm assuming you mean ... NetBIOS resolution as well. ...
      (microsoft.public.windows.server.active_directory)
    • RE: Weird entries in my firewall
      ... it was the agent for Promise Fasttrack RAID. ... the network to find other RAID cards on the network. ... And since my firewall is blocking them, ... and always broadcasts to port 712. ...
      (Security-Basics)
    • Re: UDP broadcast with 2 adapters
      ... not the effect of using INADDR_ANY in your bind call. ... only to the network to which that NIC belongs. ... I broadcast the info on specific UDP ports: ... And I receive broadcasts thus: ...
      (microsoft.public.win32.programmer.networks)
    • Re: Why is win2000 broadcasting?
      ... Maybe the machine that is sending out the broadcasts is the browse master. ... A virus or worm usually will usually flood your network ... Parasites are not usually considered ...
      (microsoft.public.win2000.networking)