From: Gavin White (white.gavin@gmail.com)
Date: Mon Aug 21 2006 - 12:11:18 EDT
On 17 Aug 2006 01:03:14 -0000, penetrationtestmail@gmail.com
<penetrationtestmail@gmail.com> wrote:
> > I think it does matter. Because there will be more than host replying to
>
> > ARP broadcasts and the question is what will happen.
>
>
> That is the question... And if anyone knows the exact answer, that would be most helpful ;)
>
I've experimented with this before, with two PCs connected to the same
switch (I forget the make, it was a cheapo model), both with the same
MAC address.
The two PCs could still browse a remove website, but at a much reduced
speed. It felt like going through a slow modem. I had the feeling that
packets coming back from the web server were being randomly sent to
either PC.
Depending on the infrastructure, both you and the spoofee may still
get service, but it might be pretty slow.
Gavin
------------------------------------------------------------------------
This List Sponsored by: Cenzic
Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php
------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:56:46 EDT