Talk:ARP spoofing

Legitimate usage

I would highly encourage any editors wishing to expand this article to expand the Legitimate usage section first. ARP spoofing isn't just for script kiddies. --huwr 00:46, 24 September 2005 (UTC)

This issue still stands not only this article, but DNS spoofing as well. Commented there. Tule-hog (talk) 04:33, 18 September 2024 (UTC)

I've added some citations and what I believe to be clearer language to this section. However, I can't find any evidence that it is used to redirect clients to authentication pages (see Captive Portal for a description of how this is normally achieved), so I've removed a paragraph. It's been marked as 'citation needed' since May of 2011 and what few references I can find were vague enough to have almost certainly been based on this article. 82.35.189.188 (talk) 11:10, 4 January 2013 (UTC)

Layout

The ARP Detection section should be split into two sections, detection and prevention. These are two different types of technological responses, and should be separated. BruceBarnett (talk) 15:55, 20 February 2012 (UTC)

Technical discription

If it is would be good (and I'm not sure if it would be), I'd be happy to contribute a technical description of the how and why of ARP poisoning. I would try to make it accessible to everyone, but it would necessarily use many technical terms. If a more experienced member could give me a yes or no answer, I'd be happy to get on it. --Dsg123456789 00:45, 4 May 2006 (UTC)

Well, we would need a reliable source for the article. If you draw up a White Paper, or something similar, then we can reference it. Sephiroth storm (talk) 17:41, 25 February 2009 (UTC)

I am very interested in who first documented this class of attack. Such information would be very useful to security researchers looking to use Wikipedia for citation information. --69.110.151.125 23:56, 25 March 2007 (UTC)

ARP flooding

I can't find a good reference but I believe that ARP flooding is a synonym. If someone could confirm that I'd appreciate it. I do know that ARP flooding is not a synonym for MAC flooding so I've already pointed redirects here instead. --Kvng (talk) 03:54, 2 May 2010 (UTC)

ARP Defenses section

Some Computer Internet Security suites have ARP spoofing block feature. An example would be rising internet security, which I have. It has intercepted ARP spoofing attempts and blocked it. I am sure various other security suites and firewalls, would have ARP spoofing blocking capabilities too. — Preceding unsigned comment added by Internetuser4529 (talk • contribs) 18:00, 28 March 2012 (UTC)

Comodo Firewall includes anti-ARP spoofing technology, although it can sometimes block legitimate traffic, too. 161.31.138.177 (talk) 20:11, 8 December 2013 (UTC)

External links modified

InternetArchiveBot modifications

1

Hello fellow Wikipedians,

I have just added archive links to one external link on ARP spoofing. Please take a moment to review my edit. If necessary, add {{cbignore}} after the link to keep me from modifying it. Alternatively, you can add {{nobots|deny=InternetArchiveBot}} to keep me off the page altogether. I made the following changes:

• Added archive https://web.archive.org/20120709235815/http://www.megapanzer.com:80/2012/04/11/ape-the-arp-poisoning-engine/? to http://www.megapanzer.com/2012/04/11/ape-the-arp-poisoning-engine/

When you have finished reviewing my changes, please set the checked parameter below to true to let others know.

Y An editor has reviewed this edit and fixed any errors that were found.

• If you have discovered URLs which were erroneously considered dead by the bot, you can report them with this tool.
• If you found an error with any archives or the URLs themselves, you can fix them with this tool.

Cheers. —^{cyberbot II}_{Talk to my owner:Online} 05:32, 19 October 2015 (UTC)

2

Hello fellow Wikipedians,

I have just added archive links to one external link on ARP spoofing. Please take a moment to review my edit. If necessary, add {{cbignore}} after the link to keep me from modifying it. Alternatively, you can add {{nobots|deny=InternetArchiveBot}} to keep me off the page altogether. I made the following changes:

• Added archive http://web.archive.org/web/20080831003151/http://sync-io.net:80/Sec/anti-arpspoof.aspx to http://sync-io.net/Sec/anti-arpspoof.aspx

When you have finished reviewing my changes, please set the checked parameter below to true or failed to let others know (documentation at {{Sourcecheck}}).

Y An editor has reviewed this edit and fixed any errors that were found.

• If you have discovered URLs which were erroneously considered dead by the bot, you can report them with this tool.
• If you found an error with any archives or the URLs themselves, you can fix them with this tool.

Cheers.—^{cyberbot II}_{Talk to my owner:Online} 10:22, 28 February 2016 (UTC)

3

Hello fellow Wikipedians,

I have just modified one external link on ARP spoofing. Please take a moment to review my edit. If you have any questions, or need the bot to ignore the links, or the page altogether, please visit this simple FaQ for additional information. I made the following changes:

• Added archive https://web.archive.org/web/20110606051646/http://www.antiarp.com:80/english.html to http://www.antiarp.com/english.html

When you have finished reviewing my changes, please set the checked parameter below to true or failed to let others know (documentation at {{Sourcecheck}}).

This message was posted before February 2018. After February 2018, "External links modified" talk page sections are no longer generated or monitored by InternetArchiveBot. No special action is required regarding these talk page notices, other than regular verification using the archive tool instructions below. Editors have permission to delete these "External links modified" talk page sections if they want to de-clutter talk pages, but see the RfC before doing mass systematic removals. This message is updated dynamically through the template {{source check}} (last update: 5 June 2024).

• If you have discovered URLs which were erroneously considered dead by the bot, you can report them with this tool.
• If you found an error with any archives or the URLs themselves, you can fix them with this tool.

Cheers.—InternetArchiveBot (Report bug) 09:04, 1 October 2016 (UTC)

4

Hello fellow Wikipedians,

I have just modified 2 external links on ARP spoofing. Please take a moment to review my edit. If you have any questions, or need the bot to ignore the links, or the page altogether, please visit this simple FaQ for additional information. I made the following changes:

• Added archive https://web.archive.org/web/20110305160956/http://www.l0t3k.org/security/tools/arp/ to http://www.l0t3k.org/security/tools/arp/
• Corrected formatting/usage for http://www.megapanzer.com/2012/04/11/ape-the-arp-poisoning-engine/

When you have finished reviewing my changes, you may follow the instructions on the template below to fix any issues with the URLs.

This message was posted before February 2018. After February 2018, "External links modified" talk page sections are no longer generated or monitored by InternetArchiveBot. No special action is required regarding these talk page notices, other than regular verification using the archive tool instructions below. Editors have permission to delete these "External links modified" talk page sections if they want to de-clutter talk pages, but see the RfC before doing mass systematic removals. This message is updated dynamically through the template {{source check}} (last update: 5 June 2024).

• If you have discovered URLs which were erroneously considered dead by the bot, you can report them with this tool.
• If you found an error with any archives or the URLs themselves, you can fix them with this tool.

Cheers.—InternetArchiveBot (Report bug) 05:05, 24 June 2017 (UTC)