Re: Windows 2000 Static arp not static

[Blue Boar <BlueBoar () thievco com>]

Tim Habex wrote:
> To prevent this behaviour, I setup static routes both on the gateway and the
> Windows machine. Yet I didn't get the result I was expecting.
> I was still able to see packets on the Debian machine, yet I was no longer
> able to control the packets.
>
> When I looked at the arp cache of Linux, the static entry was there and
> working (?), but on the Windows machine, THE VALUE OF THE STATIC ARP WAS
> CHANGED. When ethercap was disabled, the static arp entry was returned to
> the original value.

Previously known issue:
http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0541.html

                                                BB