Re: ARP problem in Windows9X/NT

From: Joseph Gooch (mrwizardat_private)
Date: Wed Apr 14 1999 - 12:41:22 PDT

Next message: Brad Zimmerman: "aDSL routers"

Previous message: Rui Ribeiro: "RH Linux telnet problems"
Maybe in reply to: Joel Jacobson: "ARP problem in Windows9X/NT"
Next in thread: Frank Tegtmeyer: "Re: ARP problem in Windows9X/NT"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> -----Original Message-----
> From: Bugtraq List [mailto:BUGTRAQat_private]On Behalf Of
> Alan DeKok
> Sent: Tuesday, April 13, 1999 3:49 PM
> To: BUGTRAQat_private
> Subject: Re: ARP problem in Windows9X/NT
>
>
> routeat_private wrote:
> >     Didn't test your code.  Rolled my from the same libnet
> example, and it
> >     does work against NT and 95/98.
>
>   I tested yours against a number of machines at work.  Summary:
>
>   NT4 sp3 displays one requestor.  While it's on-screen, any
> additional ARP packets are ignored.  Clicking 'OK', and then sending
> more packets results in another requestor.
>
>   95/98 displays one requestor per packet.

Same behavior here, however NT LOGS all packets to the event log.  I'm not
sure of NT's logging behavior, it could either fill the drive or if it has a
max size it could erase old events.  Possibly cover up other vulnerabilities
that were tested.  Since the MAC address isn't a real one, it's alot harder
to trace.

9x is boring, just a lame message box.

Later,
Joseph Gooch

Next message: Brad Zimmerman: "aDSL routers"
Previous message: Rui Ribeiro: "RH Linux telnet problems"
Maybe in reply to: Joel Jacobson: "ARP problem in Windows9X/NT"
Next in thread: Frank Tegtmeyer: "Re: ARP problem in Windows9X/NT"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:42:30 PDT