3550 Switch generates a huge number of ARP reply packets.

hyukin.kwon · ‎03-21-2007

Hi all,

A 3550 Switch is generating a great number of ARP reply packets to a host. actually the speed is 1000pps. you can check the sample output in the attachment file.

Is it a ARP spoofing or ARP cache poisoning attack ? The weird thing is that a 3550 switch not a host is generating packets .

Welcome any possibilities...

TIA

m.matteson · ‎03-22-2007

maybe is a bad nic on the host. swap out?

hyukin.kwon · ‎03-22-2007

Thanks matteson,

I will try, but actually the NIC is a converter which is converting RS-232c to ethernet.

I think there is a problem on that..

Anyway thanks...