Nmap Announce mailing list archives

Re: ARP idea (conjecture)


From: Rob Quinn <rquinn () sprint net>
Date: Tue, 29 Jun 1999 07:26:56 -0400

I'm not even sure if arp timeouts are OS-specific

 From experience, the timeout for a Cisco router is at least several hours.
That's how long I waited before power cycling anyway, it could be longer. I
doubt this will be a very productive method, and if you're on the wire you
probably have a lot of other options open to you.

I wonder if it'd be possible to measure ARP timeouts and compare these with a
default-listing by OS?

 How about other characteristics, like delay between arp repeats? If no one
answers, my Solaris boxes seem to broadcast in three's, at a fixed rate. That
might be more related to how long it takes our WinNT boxes to respond - another
measurable characteristic I guess.

-- 
| Opinions are _mine_, facts                                     Rob Quinn |
| are facts.                                                 (703)689-6582 |
|                                                    rquinn () sec sprint net |
|                                                Sprint Corporate Security |


Current thread: