It could also be part of a type of L2 arp poisoning attack.
You should check what application had been installed on this computer that
could have generated those arp packets.
----------------------------------------------------------------------------
Nicolas VILLATTE
CISSP, GCIA, GCIH, GCFA
Sr. Security Management Specialist
-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com] On
Behalf Of ilaiy
Sent: mardi 7 août 2007 6:10
To: Kevin
Cc: pen-test@securityfocus.com
Subject: Re: ARP Requests
Kevin
http://blogs.msdn.com/virtual_pc_guy/archive/2005/01/17/354971.aspx
./thanks
ilaiy
On 8/6/07, Kevin <kbiggs81@gmail.com> wrote:
> I noticed the other day one of my computers was sending thousands of
> ARP requests which showed up in in Ethereal info: Malformed Packet.
> Dest: 00:00:00:00:00:00. Anyone got any ideas on what this might be?
> After I disconnected the computer from the network and plugged it back
> in, it stopped. I'm not sure what was happening.
>
> ----------------------------------------------------------------------
> --
> This list is sponsored by: Cenzic
>
> Need to secure your web apps NOW?
> Cenzic finds more, "real" vulnerabilities fast.
> Click to try it, buy it or download a solution FREE today!
>
> http://www.cenzic.com/downloads
> ----------------------------------------------------------------------
> --
>
>
------------------------------------------------------------------------
This list is sponsored by: Cenzic
Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!
http://www.cenzic.com/downloads
------------------------------------------------------------------------
------------------------------------------------------------------------
This list is sponsored by: Cenzic
Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!
http://www.cenzic.com/downloads
------------------------------------------------------------------------
|