Vulnerability Development mailing list archives

Re: swbell DSL bug ?


From: Jeffrey.Karpenko () RHIGROUP COM (Jeffrey Karpenko)
Date: Mon, 8 May 2000 11:24:29 -0400


Jamie:
        From what you are saying it seems your ISP is providing Static IP
Addresses to the customer.  I say that because you indicate that each person
has an IP Address assigned to them and it is recorded that that person now
owns that address.  If I am misunderstanding you then . . . well.  Anyway,
ISP's will be using DHCP.  My ISP, for instance, is using DHCP.  Now while
my lease of the IP Address expires after 180,000 seconds (2.08 days), I can
be fairly certain that I can obtain the same IP Address the next time I
login because the ARP is still cached.  However, if I wait a long while
before logging in again, I am fairly certain my IP will change.  I haven't
actually attempted this yet mind you.  I would assume that if my current ISP
has very few customers then regardless if the ARP Cache clears or not, I
would probably obtain the same IP Address.  However, if the ISP DSL customer
base were to grow, then so would the chances that my IP Address would be
taken by some other user once my 180,000 seconds expired.
        In either case it is not a bug.

Jeffrey

Hash: SHA1

Absolutley,  my DSL provider's DHCP will only assign an IP to the MAC
address on the NIC they provided, and it is always the same internal
IP.  There are however ways to change the burned in address, with
which you could theoretically borrow someone else's IP on the same
subnet, provided they did not have an IP already leased.(or perhaps
even if they do??.)

Jamie


Current thread: