Hi,
I hope someone can help me out with this. I am running
Wireshark from two different computers and getting the same results. Basically
I am getting the following:
ARP/RARP Duplicate IP address configured (192.168.10.222)
ARP/RARP Duplicate IP address configured (192.168.10.220)
ARP/RARP Duplicate IP address configured (192.168.10.208)
This is an example:
154,"16:58:24.071822","Dell_55:3b:5b","Dell_42:b5:3a","ARP","Who
has 192.168.10.40? Tell 192.168.10.222 (duplicate use of 192.168.10.200
detected!)"
These addresses are statically assigned and I don’t
see how they could be duplicated. I read that this could be an ARP attack
but I’m not sure what to look for.
How can I know whether it is an ARP attack and trace the
computer that’s causing the problem.
Regards,
JD
Coverage cannot be assumed to be bound, altered or canceled without confirmation from an authorized representative of Braishfield Associates, Inc.
DISCLAIMER:
CONFIDENTIALITY NOTICE: Braishfield Associates, Inc. would like you to know that the information contained in this communication, including attachments is privileged and confidential. It is intended only for the exclusive use of the addressee. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering it to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. Insurance coverage can not be bound, amended or changed via an e-mail message without knowledge or consent from the insuring carrier. If you have received this communication in error please notify us by telephone immediately at (407) 825-9911 or e-mail disclaimer@xxxxxxxxxxxxxxx. Thank you.
| 