Security Basics mailing list archives

starnge arp.dat


From: greg gede <mymilis2000 () yahoo com>
Date: Thu, 23 Oct 2003 00:02:04 -0700 (PDT)

i've just installed arpwatch 2 days ago and begin to
receive reports from it in my mailbox eversince. it's
cool, but what's bothering me is that arpwatch detect
some ip's which are not supposed to exist, because i
never made the subnet. here are some of them :

0:7:95:e1:df:af 192.168.2.39    1066828102
0:50:bf:9:5f:ea 192.168.2.10    1066889933
0:7:e9:f4:62:ba 192.168.2.6     1066798799
0:50:bf:9:5b:ab 192.168.2.4     1066875039
0:50:bf:9:5d:33 192.168.2.15    1066744308
0:0:21:f8:c9:20 192.168.2.5     1066877887
0:50:bf:9:5c:35 192.168.2.11    1066885441
0:50:bf:9:5f:4  192.168.2.12    1066891005

there's shouldn't be subnet 192.168.2.0/24 in my
network. how come they showed up? when i did ping and
arping there's no reply. what's going on?

regards,
gregor

__________________________________
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com

---------------------------------------------------------------------------
Visual & Easy-to-use are not words that you think of when talking about 
network analyzers. Are you sick of the three window text decodes? Download ClearSight Network's Analyzer and see a new 
network analysis tool that 
makes the complex - easy
http://www.securityfocus.com/sponsor/ClearSightNetworks_security-basics_031021
----------------------------------------------------------------------------


Current thread: