[c-nsp] security

[Paul Cosgrove]

Gert Doering wrote:
> Hi,
>
> On Tue, Dec 02, 2008 at 03:29:58PM +0000, Paul Cosgrove wrote:
>   
>> Arp uses a destination IP of 255.255.255.255, which  is the 'limited 
>> broadcasts address'.  Packets with this destination are never routed 
>> between subnets.
>>     
>
> Actually, ARP does *not* use any IP broadcast address at all, neither 
> "limited" or "subnet broadcast".
>
> $ tcpdump -v -n -s0 -e 'arp'
> 16:35:21.981368 0:22:55:93:88:80 ff:ff:ff:ff:ff:ff 0806 60: arp who-has 195.30.1.10 tell 195.30.1.118
>
> ... no IP address in here, except source and destination hosts.
>
> Ethernet broadcast, yes.
>
> gert
>   

Oops, shouldn't be getting that wrong.  Thanks for the correction and 
appologies for the confusion.

Paul.