RE: starnge arp.dat

["Jorge Coll" <jcoll () commonx com>]

Verify the results with a sniffer if you haven't.  This may be able to
tell you if it's a problem with arpwatch itself.

Assuming the hosts are really there, if you try to ping them, you won't
be able to unless you switch your IP something in the 192.168.2.0/24
subnet.  Do you have any misconfigured clients?  Did you use this subnet
before?  Are you using DHCP?

- jc 

-----Original Message-----
From: greg gede [mailto:mymilis2000 () yahoo com] 
Sent: Thursday, October 23, 2003 3:02 AM
To: security-basics () securityfocus com
Subject: starnge arp.dat 

i've just installed arpwatch 2 days ago and begin to
receive reports from it in my mailbox eversince. it's
cool, but what's bothering me is that arpwatch detect
some ip's which are not supposed to exist, because i
never made the subnet. here are some of them :

0:7:95:e1:df:af 192.168.2.39    1066828102
0:50:bf:9:5f:ea 192.168.2.10    1066889933
0:7:e9:f4:62:ba 192.168.2.6     1066798799
0:50:bf:9:5b:ab 192.168.2.4     1066875039
0:50:bf:9:5d:33 192.168.2.15    1066744308
0:0:21:f8:c9:20 192.168.2.5     1066877887
0:50:bf:9:5c:35 192.168.2.11    1066885441
0:50:bf:9:5f:4  192.168.2.12    1066891005

there's shouldn't be subnet 192.168.2.0/24 in my
network. how come they showed up? when i did ping and
arping there's no reply. what's going on?

regards,
gregor

__________________________________
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com

------------------------------------------------------------------------
---
Visual & Easy-to-use are not words that you think of when talking about 
network analyzers. Are you sick of the three window text decodes?
Download ClearSight Network's Analyzer and see a new network analysis
tool that 
makes the complex - easy
http://www.securityfocus.com/sponsor/ClearSightNetworks_security-basics_
031021
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
Visual & Easy-to-use are not words that you think of when talking about
network analyzers. Are you sick of the three window text decodes? Download ClearSight Network's Analyzer and see a new 
network analysis tool that
makes the complex - easy
http://www.securityfocus.com/sponsor/ClearSightNetworks_security-basics_031021
----------------------------------------------------------------------------