Timeline for An ARP table keeps multiple MAC addresses for an IP address or a single one?
Current License: CC BY-SA 4.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 2, 2021 at 9:10 | comment | added | Alan Evangelista | My point is that not necessarily there are multiple IP entries for one MAC in the victim's ARP table when there is an ARP spoofing attack, there can be a single fake one. Your answer made me think there would always be multiple. | |
| Aug 2, 2021 at 9:07 | comment | added | schroeder♦ | @AlanEvangelista it doesn't need to be for a single IP, though. As the articles mention, one can ARP spoof a few IPs. | |
| Aug 2, 2021 at 8:54 | comment | added | Alan Evangelista | As the context is the two linked articles, I think that "there can be multiple IP entries for one MAC if the attacker sends (requested or gratuitous) ARP replies with his true IP too" would be clearer and more accurate than "there are multiple IP entries for one MAC". It took me a while to figure that out. | |
| Aug 1, 2021 at 19:33 | comment | added | schroeder♦ | @Bergi of course, but the context is the articles linked | |
| Aug 1, 2021 at 19:15 | comment | added | Bergi | "there are multiple IP entries for the one MAC" - you mean the attacker sits at 192.168.0.20? They might not use a separate IP address at all though. | |
| Jul 31, 2021 at 12:56 | vote | accept | Alan Evangelista | ||
| Jul 31, 2021 at 12:50 | history | edited | schroeder♦ | CC BY-SA 4.0 |
added 137 characters in body
|
| Jul 31, 2021 at 12:45 | history | edited | schroeder♦ | CC BY-SA 4.0 |
added 137 characters in body
|
| Jul 31, 2021 at 12:39 | history | answered | schroeder♦ | CC BY-SA 4.0 |