You are currently browsing the 巴鲁 posts tagged: arp cache poisoning


DATAPLANE-4-ARPPOISON: ARP CACHE POISONING: Conflicting snoop entry found

登陆AC,在log中看到如下一段:

Dec 19 11:30:25 2009: %DATAPLANE-4-ARPPOISON: ARP CACHE POISONING:  Conflicting snoop entry found :Ethernet Src Mac: 00-23-68-23-99-7A, Ethernet Dst Mac: FF-FF-FF-FF-FF-FF, ARP Src Mac: 00-23-68-23-99-7A, ARP Dst Mac: 00-00-00-00-00-00, ARP Src IP: 211.103.23.213, ARP Target IP: 211.103.23.213 , Snoop Table MAC = 00-22-43-64-06-BD, Snoop Table IP = 211.103.23.213.

这在运营商网络中较普遍,有可能是由于DHCP分配或者dhcp/arp攻击所致。