Yesterday we had a machine that caused a nasty ARP storm and started snagging DHCP addresses as fast as it could (stealing addresses). It was ARPing as if it were every machine on the network. It was a windows 95 box and was immediately pulled off of the network. Once the machine was rebooted it stopped. Doing a quick onceover on the machine and looking through the registry I didn't see anything that seemed suspect. I have seen bad NICs cause broadcast storms but this is a first for me. If anyone knows of any exploits or seen anything like this as a hardware failure could ya let me know. Thanks, Mike Reeves Security Administrator ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Thu Aug 09 2001 - 15:21:02 PDT