Security Basics mailing list archives
RE: starnge arp.dat
From: "Jorge Coll" <jcoll () commonx com>
Date: Thu, 23 Oct 2003 13:37:25 -0400
Verify the results with a sniffer if you haven't. This may be able to tell you if it's a problem with arpwatch itself. Assuming the hosts are really there, if you try to ping them, you won't be able to unless you switch your IP something in the 192.168.2.0/24 subnet. Do you have any misconfigured clients? Did you use this subnet before? Are you using DHCP? - jc -----Original Message----- From: greg gede [mailto:mymilis2000 () yahoo com] Sent: Thursday, October 23, 2003 3:02 AM To: security-basics () securityfocus com Subject: starnge arp.dat i've just installed arpwatch 2 days ago and begin to receive reports from it in my mailbox eversince. it's cool, but what's bothering me is that arpwatch detect some ip's which are not supposed to exist, because i never made the subnet. here are some of them : 0:7:95:e1:df:af 192.168.2.39 1066828102 0:50:bf:9:5f:ea 192.168.2.10 1066889933 0:7:e9:f4:62:ba 192.168.2.6 1066798799 0:50:bf:9:5b:ab 192.168.2.4 1066875039 0:50:bf:9:5d:33 192.168.2.15 1066744308 0:0:21:f8:c9:20 192.168.2.5 1066877887 0:50:bf:9:5c:35 192.168.2.11 1066885441 0:50:bf:9:5f:4 192.168.2.12 1066891005 there's shouldn't be subnet 192.168.2.0/24 in my network. how come they showed up? when i did ping and arping there's no reply. what's going on? regards, gregor __________________________________ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com ------------------------------------------------------------------------ --- Visual & Easy-to-use are not words that you think of when talking about network analyzers. Are you sick of the three window text decodes? Download ClearSight Network's Analyzer and see a new network analysis tool that makes the complex - easy http://www.securityfocus.com/sponsor/ClearSightNetworks_security-basics_ 031021 ------------------------------------------------------------------------ ---- --------------------------------------------------------------------------- Visual & Easy-to-use are not words that you think of when talking about network analyzers. Are you sick of the three window text decodes? Download ClearSight Network's Analyzer and see a new network analysis tool that makes the complex - easy http://www.securityfocus.com/sponsor/ClearSightNetworks_security-basics_031021 ----------------------------------------------------------------------------
Current thread:
- starnge arp.dat greg gede (Oct 23)
- <Possible follow-ups>
- RE: starnge arp.dat Jorge Coll (Oct 23)