Security Basics mailing list archives
starnge arp.dat
From: greg gede <mymilis2000 () yahoo com>
Date: Thu, 23 Oct 2003 00:02:04 -0700 (PDT)
i've just installed arpwatch 2 days ago and begin to receive reports from it in my mailbox eversince. it's cool, but what's bothering me is that arpwatch detect some ip's which are not supposed to exist, because i never made the subnet. here are some of them : 0:7:95:e1:df:af 192.168.2.39 1066828102 0:50:bf:9:5f:ea 192.168.2.10 1066889933 0:7:e9:f4:62:ba 192.168.2.6 1066798799 0:50:bf:9:5b:ab 192.168.2.4 1066875039 0:50:bf:9:5d:33 192.168.2.15 1066744308 0:0:21:f8:c9:20 192.168.2.5 1066877887 0:50:bf:9:5c:35 192.168.2.11 1066885441 0:50:bf:9:5f:4 192.168.2.12 1066891005 there's shouldn't be subnet 192.168.2.0/24 in my network. how come they showed up? when i did ping and arping there's no reply. what's going on? regards, gregor __________________________________ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com --------------------------------------------------------------------------- Visual & Easy-to-use are not words that you think of when talking about network analyzers. Are you sick of the three window text decodes? Download ClearSight Network's Analyzer and see a new network analysis tool that makes the complex - easy http://www.securityfocus.com/sponsor/ClearSightNetworks_security-basics_031021 ----------------------------------------------------------------------------
Current thread:
- starnge arp.dat greg gede (Oct 23)
- <Possible follow-ups>
- RE: starnge arp.dat Jorge Coll (Oct 23)