Security Basics mailing list archives

Re: ARP spoofing


From: noob () gmail com
Date: Fri, 12 Dec 2008 09:43:25 -0700

you usually don't send ONE arp reply to spoof 2 hosts.
you'll send an arp reply to host_a telling it you're the gateway (using host_a mac addy as destination and gateway mac 
addy as source), and you'll also send an arp reply to the gateway telling it you're host_a (using host_a mac addy as 
the source and gateway mac addy as the destination).

in such cases host_x shouldn't see anything. Now if you choose to flood the network with broadcasted arp announces, 
you'll eventually face some problems.


Current thread: