Re: ARP packets usage
- From: habibielwa7id <fouad012@xxxxxxxxx>
- Date: Thu, 25 Oct 2007 08:21:55 -0000
On Oct 25, 12:37 am, Philippe Signoret <philippe.signo...@xxxxxxxxx>
wrote:
I ran Ethereal and captures all packets for 1 minute and 49 seconds.
These are the results I got:
-------------------
Total 503
TCP 353 70.2%
UDP 15 3.0%
ICMP 13 2.6%
ARP 122 24.3%
Running time: 00:01:49
--------------------
Is this a normal ARP packet percentage? It seems a bit high to me.
Thanks,
Philippe Signoret West
It also seems a bit high to me, Beware of ARP packets because it may
used to sniff the traffic between 2 hosts or to cut the connections
between 2 hosts, As known as ARP poisoning or ARP spoofing, And also
there are some Windows viruses that use this protocol to halt the
Internet connections inside the whole lan, And I think you are sure if
your LAN is trusted or not, If it is not trusted so beware what those
packets may used for? Any way check if the values that the sniffer
gives you are valid and correct or not?
.
- References:
- ARP packets usage
- From: Philippe Signoret
- ARP packets usage
- Prev by Date: Re: Multiple certification authorities?
- Next by Date: Re: Is a HTTP header a clear text?
- Previous by thread: ARP packets usage
- Next by thread: Re: ARP packets usage
- Index(es):
Relevant Pages
|
