Customer login  |   Contact us
Home Company Products Support Purchase
Forum Home » Network Probe

Topic: Unknown Mac addresses
Replies: 1   Pages: 1   Last Post: Mar 9, 2005 11:46 PM by: gusking


Back to Topic List Back to Topic List Topics: [ Previous | Next ]
Replies: 1   Pages: 1  
Ron
Unknown Mac addresses
Posted: Feb 1, 2005 1:05 AM
  Reply

I have been monitoring a problem over several day where huge amounts of ICMP Echo Request traffic is being generated, both inside and outside my firewall. The packets all originate from IP=127.0.0.1 (Mac 08:00:2b:00:dc:dc) and all packets are destined for a variation of IP's but the same MAC (08:00:2b:00:01:02). Neither of these Hardware addresses reside on my network and I am thoroughly stumped! Any ideas?

Thanks

gusking

Posts: 1
From: St. Louis
Registered: Mar 9, 2005
Re: Unknown Mac addresses
Posted: Mar 9, 2005 11:46 PM
  Reply

We have been getting the same thing. Then for some reason accident we ran the sniffer software (Ethereal) from a workstation instead of a laptop and we didn't see the traffic.
Then we connected the port we were sniffing to an old hub (not a switch) as well as both the laptop and a workstation and ran Ethereal on both the laptop and WS. Only the laptop saw the ICMP traffic from 127.0.0.1 sources. (destination addresses were all over networks but real addresses)
Hypotheses anyone? We did eliminate viruses being on the laptop.



© 1998-2019 ObjectPlanet, Inc. Øvre Slottsgate 5, 0157 Oslo, Norway Tel (+47) 2233 3360 | Fax (+47) 2233 3361