Re: ARP requests

[marc farnum rendino <mvgfr () mac com>]

In-Reply-To: <311480-220038421135437734 () davlin net>

> I had a question for the list, i was wondering if there was any 
way
> to tell who is sending arp requests to my routers.. any help 
would be
> greatly apreciated.

Been wrestling with that myself this week: a relatively small 
amount of ARP traffic, but enough to be noticeable on one of my 
smaller pipes. It just started shortly after midnight, August 18th 
and is definitely SRCd from a router, but what's ultimately causing 
it is upstream; haven't figured out what yet though...

- Marc

---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------