Educause Security Discussion mailing list archives

ARP scan


From: Theresa M Rowe <rowe () OAKLAND EDU>
Date: Wed, 27 Aug 2003 08:08:27 -0400

We are seeing unusual scans - ARP traffic.  When we review,
the host source of the scans is varying - different computers
every time.  If this was ICMP traffic, we'd think it was with
the virus traffic.  But this is new - started this week - and
is very disruptive.

Any ideas?
Theresa Rowe
Assistant Vice President
University Technology Services
www.oakland.edu/uts - the latest news from University Technology Services

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.

Current thread: