Security Basics mailing list archives

Re: ARP spoofing


From: "Robin Wood" <dninja () gmail com>
Date: Fri, 12 Dec 2008 17:11:50 +0000

2008/12/12 Nokin Jérôme <jerome.nokin () trasys be>:
Hello all,

I have a small question about ARP spoofing (with for example ettercap).

When you send arp reply telling that :
* the MAC address of the gateway is me
* the MAC address of host_A is me

What happent to host_X which also receive the fake MAC address of the gateway ?

The arp request is broadcast but the arp response is unicast so only
the sender will get it. If you want to make it a broadcast response
you can then you will poison all the hosts.

Robin


Current thread: