Re: ARP requests

[marc farnum rendino <mvgfr () mac com>]

In-Reply-To: <00c801c36805$84ec9c10$3e01a8c0@jsansi>

> Using windump -n(or tcpdump)...

If it's the sort of thing I'm seeng, all that gets you is that MAC 
address of the router in question, which doesn't get you too far - 
we need to look further; upstream in my case.

- Marc

---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------