[Ns-bugs] [Bug 107] ARP Cache is not updated by the reception of ARP Requests packets

bugzilla-daemon@nsnam-www.ece.gatech.edu bugzilla-daemon at nsnam-www.ece.gatech.edu
Wed Nov 21 06:02:16 PST 2007


http://www.nsnam.org/bugzilla/show_bug.cgi?id=107





------- Comment #4 from mathieu.lacage at sophia.inria.fr  2007-11-21 09:02 -------

> > I think that I did not implement this before because it is a classic ARP
> > poisoning attack (sending fake arp requests).
> > 
> 
> RFC 826 algorithm does not say to omit that step due to ARP poisoning.  IMHO we
> should stick to RFCs by default, or change the behaviour to match real world

yes, but RFC 826 was written in a time when arp poisoning attacks were not a
concern so, that argument is not relevant.

> implementations when most used implementation do something different.  Do you
> know for a fact how e.g. Windows (most deployed OS) handles this scenario?

I thought that windows did not update its cache in this case but I don't have a
machine handy to verify that it is really the case. 

Anyhow, I did not want to say that I was against this patch. I just meant to
explain why I think it was not done that way yet.


-- 
Configure bugmail: http://www.nsnam.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.


More information about the Ns-bugs mailing list