Sunday, February 21, 2010

Interesting FAQ'S

While doing packet analysis i came across some Gratuitous ARP packets in form of



At first instance people would believe that the gratuitous ARP request is an ARP spoff attack , which is not  always true. 
Most hosts on a network will send out a Gratuitous ARP when they are initialising their IP stack. This Gratuitous ARP is an ARP request for their own IP address and is used to check for a duplicate IP address. If there is a duplicate address then the stack does not complete initialisation.

No comments:

Post a Comment