Mailinglist Archive: opensuse-security (320 mails)

< Previous Next >
Questions about arp storm.
  • From: "jiade" <jiadejiade@xxxxxxxxxxx>
  • Date: Wed, 7 May 2003 10:23:54 +0800
  • Message-id: <Sea2-DAV11tMTF4ia5w00000348@xxxxxxxxxxx>
I got arp storm in my network(30 PCs and some WLAN devices),

about 10,000 arp requests per second, no responses, lasting for several minutes,

all these arp requests have the same content which looks very strange:

SRC DST info
0060e0017d96 0060f0017d96 who has 192.168.1.188? tell 192.168.1.188

it's an arp request but the DST is not a broadcast,

and the DST is a real MAC address of one of my netcards while the SRC is a fake one.

This happens several times a day but not regularly.

Who will send millions of this kind of arp requests?

Need your help, thanks.



< Previous Next >
This Thread
  • No further messages