RE: ARP requests

["Jimmy Sansi" <jsansi () ritzfoodservice com>]

Using windump -n(or tcpdump) shows the IP address (running
windump without any switches will give you the host name that
you can use to ping) of the ARP requesting workstation. Using
arp -a (from a Windows machine) will map the offending
workstations IP to a MAC, you could then look at the physical
port to MAC mapping on a switch.

-Jimmy

-----Original Message-----
From: crouth [mailto:crouth () davlin net]
Sent: Thursday, August 21, 2003 9:10 AM
To: security-basics () securityfocus com
Subject: ARP requests


Hi all,

I had a question for the list, i was wondering if there was any way
to tell who is sending arp requests to my routers.. any help would be
greatly apreciated.

~Chris


---------------------------------------------------------------------------
----------------------------------------------------------------------------



---------------------------------------------------------------------------
----------------------------------------------------------------------------