[Snort-users] ARP

jai jai.s at ...6716...
Wed Sep 11 01:31:05 EDT 2002


Hi,

I am getting follwoing ..broadcast message...in all the machines....

tcpdump messages...

13:57:16.634506 0:9:b7:74:9:c0 Broadcast arp 60: arp reply 204.141.220.76 is-at 0:9:b7:74:9:c0 (0:9:b7:74:9:c0)
13:57:16.635815 0:9:b7:73:fc:40 Broadcast arp 60: arp reply 204.141.220.76 is-at 0:9:b7:73:fc:40 (0:9:b7:73:fc:40)


I don't understand why are getting these message....as 204.141..is not our network. 

Secondly Can i block this ip address using router...

Plz help me out

Jai





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20020911/af820abc/attachment.html>


More information about the Snort-users mailing list