Re: ARP requests for IP address 0.0.0.0



Hi,

thanks a lot for your answer.

Yes. The address "0.0.0.0" is the "any" address. That means, "any"
host should answer that request. The MAC address you're seeing is some
random MAC address from your network (most likely).

I am sorry but I got something wrong in my post. Had a look at the logs
again and the ARP requests comes from 0.0.0.0 and a valid destinatin IP
which I think is the IP of the host sending the request out.

I think this packet is sent when the host comes up. Something like
Windows sending out an unsolicited ARP reply to its own IP address to
check if another host has the IP address assigned.

Regards,
Chris

.



Relevant Pages

  • Log corruption on multiple webservers, log analyzers,...
    ... Related RFC´s about Internet Host Names convention: ... To succesfully attack a server with “ILLC” technique is mandatory that web ... a machine with a host name as "123.123.123.123" makes a request ... wouldn't appear in the access log file. ...
    (Bugtraq)
  • Re: Book on Pre-MATH for cryptography and cryptanalysis.
    ... There, go request a reform! ... I am reportedly ill, so I host you. ...
    (sci.crypt)
  • Re: HttpWebRequest and Host header (ANSWERED)
    ... However there is a subtle difference in the request ... headers sent with this method, and what the actual request should be ... Host: www.company.com ...
    (microsoft.public.dotnet.framework)
  • Re: DHCP client - Help configuring.
    ... The DHCP server did not pass a host name for this host to use. ... error processing name service request ...
    (comp.os.vms)
  • Re: cgi bin counter
    ... the request did not have a Referer with it so the host would not want ... so the host must have sent ... an Etag with that 0 which is now being used to refresh the old page. ... >>>other types of cgi bin components but not counter! ...
    (microsoft.public.windows.inetexplorer.ie6.browser)

Quantcast