So: I have a packet sniffing question.
I'm sniffing packets on a fairly large network (Hundreds to thousands of computers) and I keep seeing packets that look like this:
Source: Cisco_bf:06:0
Destination: Broadcast
Protocol: ARP
Length: 60
Info: Who has 10.11.x.xx? Tell 10.11.x.x
I x'd out the last few numbers, but you get the point. What is this? Is it scanning for people connected to the network that shouldn't be, or just people connected to the network, or something completely different?
Thanks.
Edit, found this: Bidirectional Forwarding Detection for EIGRP [IP Routing] - Cisco Systems
Could it be that? Bidirectional forwarding? From what I skimmed from that article, is the network checking its own integrity?
Results 1 to 3 of 3
Thread: Packet sniffing question
- 20 Jan. 2012 04:55pm #1
- Join Date
- Apr. 2010
- Location
- When freedom is outlawed only outlaws will be free
- Posts
- 5,113
- Reputation
- 195
- LCash
- 15.00
Packet sniffing question
Last edited by 323; 20 Jan. 2012 at 04:57pm.
- 20 Jan. 2012 04:57pm #2
Disco is neat.
- 20 Jan. 2012 07:25pm #3
- Join Date
- Apr. 2010
- Location
- When freedom is outlawed only outlaws will be free
- Posts
- 5,113
- Reputation
- 195
- LCash
- 401.00