Tim Habex wrote:
> To prevent this behaviour, I setup static routes both on the gateway and the
> Windows machine. Yet I didn't get the result I was expecting.
> I was still able to see packets on the Debian machine, yet I was no longer
> able to control the packets.
>
> When I looked at the arp cache of Linux, the static entry was there and
> working (?), but on the Windows machine, THE VALUE OF THE STATIC ARP WAS
> CHANGED. When ethercap was disabled, the static arp entry was returned to
> the original value.
Previously known issue:
http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0541.html
> To prevent this behaviour, I setup static routes both on the gateway and the
> Windows machine. Yet I didn't get the result I was expecting.
> I was still able to see packets on the Debian machine, yet I was no longer
> able to control the packets.
>
> When I looked at the arp cache of Linux, the static entry was there and
> working (?), but on the Windows machine, THE VALUE OF THE STATIC ARP WAS
> CHANGED. When ethercap was disabled, the static arp entry was returned to
> the original value.
Previously known issue:
http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0541.html
BB
[ reply ]