Bugtraq mailing list archives
Re: ARP problem in Windows9X/NT
From: knegge () YAHOO COM (Daniel Ekman)
Date: Mon, 12 Apr 1999 16:56:00 -0700
I've found a problem in Windows9X/NT's way of handeling ARP packets. If you flood a computer at your LAN with the packet below, it's user will be forced to click a messagebox's OK button x times, where x is the number of packets you flooded with.
My experience of ARP packets (in win) is that you don't even know you're being exposed of them, no message box or anytning. Another thing that bothered me was that I couldn't add a static addres of a IP in my ARP cache. In Linux I could add them static, then a ARP packet can't change them, but in windows the static flag doesen't seem to have any effect, tried on several windows boxes but the same result: an ARP packet _did_ change a static address, don't know if the static flag in win has the same purpose as in Linux. btw, only tested on win95 boxes. hope you understand my explanation :) //Knegge #define E-Mail "knegge () yahoo com" #define Sysadmin "Beacon AB, K1nu!" #define IRCNICK "Knegge" _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com
Current thread:
- Re: ARP problem in Windows9X/NT Daniel Ekman (Apr 12)
- <Possible follow-ups>
- Re: ARP problem in Windows9X/NT Joel Jacobson (Apr 13)