[c-nsp] unusual arp behavior

David J. Hughes bambi at Hughes.com.au
Thu Feb 10 17:30:10 EST 2005



> Nevertheless, I believe the most common type of duplicate address
> detection is simply ARPing for your own address, for instance:
>
> 19:56:04.846965 0:0:c0:e:69:cd ff:ff:ff:ff:ff:ff 0806 60: arp who-has 
> 195.1.209.35 tell 195.1.209.35

Have to agree with Steinar here.  I think the "respond to arps from 
other layer 3 subnets" is an endsystem attribute.  If you apply that 
logic to routers you immediately end up talking about proxy arp.


David
...



More information about the cisco-nsp mailing list