fcfsp – 2010-01-26

Happy New Year!

Here is today’s question:

I ran arp -a on a Windows machine and received this:

192.168.0.1             00-17-c5-4a-02-e6     dynamic
192.168.0.47            00-18-8b-4d-12-e1     dynamic
192.168.0.49            00-26-b9-38-2b-b0     dynamic
192.168.0.52            00-01-74-d1-6b-07     dynamic
192.168.0.53            00-06-72-c9-d7-e1     dynamic
192.168.0.111           00-AA-71-f8-b6-87     dynamic
192.168.0.161           00-21-91-57-1f-41     dynamic
192.168.0.200           00-03-ff-29-9a-19     dynamic
192.168.0.201           00-03-fa-28-97-08     dynamic

Five minutes later, I ran the command and received this:

192.168.0.1             00-18-8b-4d-12-e1     dynamic
192.168.0.47            00-18-8b-4d-12-e1     dynamic
192.168.0.49            00-26-b9-38-2b-b0     dynamic
192.168.0.52            00-01-74-d1-6b-07     dynamic
192.168.0.53            00-06-72-c9-d7-e1     dynamic
192.168.0.111           00-AA-71-f8-b6-87     dynamic
192.168.0.161           00-21-91-57-1f-41     dynamic
192.168.0.200           00-03-ff-29-9a-19     dynamic
192.168.0.201           00-03-fa-28-97-08     dynamic

Assuming I’m paranoid and this isn’t normal, what will I most likely deduce is happening??

Assumptions:

  • My default gateway is 192.168.0.1.
  • No hardware changes were made between the first and second requests.

As always, tell a nerd working behind the counter the correct answer and receive a free 450mL beverage.

Tags:

2 Responses to “fcfsp – 2010-01-26”

  1. admin says:

    The answer:

    The most likely thing I would think is happening would be that some evil-doer is poisoning/spoofing the arp caches on my machines.

  2. Jon says:

    also known as gettin’ pwn3d

Leave a Reply