[c-nsp] unusual arp behavior
David J. Hughes
bambi at Hughes.com.au
Thu Feb 10 17:30:10 EST 2005
> Nevertheless, I believe the most common type of duplicate address
> detection is simply ARPing for your own address, for instance:
>
> 19:56:04.846965 0:0:c0:e:69:cd ff:ff:ff:ff:ff:ff 0806 60: arp who-has
> 195.1.209.35 tell 195.1.209.35
Have to agree with Steinar here. I think the "respond to arps from
other layer 3 subnets" is an endsystem attribute. If you apply that
logic to routers you immediately end up talking about proxy arp.
David
...
More information about the cisco-nsp
mailing list