Re: Defending ARP Spoofing
From: Chris (chrismc911_at_hotmail.com)
Date: 11/11/05
- Previous message: Mark: "Re: Securing tcp data"
- In reply to: Volker Birk: "Re: Defending ARP Spoofing"
- Next in thread: Volker Birk: "Re: Defending ARP Spoofing"
- Reply: Volker Birk: "Re: Defending ARP Spoofing"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 11 Nov 2005 11:24:21 +0100
>>>This is a process, which can be automated. Additionally, we're talking
>>>about preventing ARP spoofing. This will not work, if one doesn't know,
>>>which MAC address is valid for which device, respectively.
>>
>>can you tell me which tool exist that can automate this process?
>
>
> There are many tools. They're called "scripting language" or "programming
> language" ;-)
Unfortunately these "tools" used to distribute/update MAC-IP pairs to
the workstations will work over TCP/UDP or somethings that goes in the
end over ARP. Which means these management tools are also vulnerable to
ARP Spoofing attacks (if they are not properly secured) which closes the
circle.
Regards,
Chris
- Previous message: Mark: "Re: Securing tcp data"
- In reply to: Volker Birk: "Re: Defending ARP Spoofing"
- Next in thread: Volker Birk: "Re: Defending ARP Spoofing"
- Reply: Volker Birk: "Re: Defending ARP Spoofing"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]