Re: [Full-Disclosure] Re: Cain and Abel

[Piw <piw@xxxxxxxxxxxx>]

Nick Vasiliev wrote:

> I have tried to set up static arp mappings on my system however the
> new ones overwrote the old ones. Also I am not sure but does it also
> screw with switch's arp tables or just the client ones? Any feedback
> would be nice


Yes, such attack re-map port<->mac pair in "plain" switches.
Static arp entries are _static_ (unchangable) for Linux.
For Windows, Windows XP is first MS system that treat static as real 
static - in previous versions "static" means that is times-out not so 
often (but could be changed)
For other OSes? dunno.

Piw

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html