PC Pals Forum

Technical Help & Discussion => Broadband, Networking, PC Security, Internet & ISPs => Topic started by: chorleydave on March 03, 2004, 22:46

Title: ARP Reply Detected
Post by: chorleydave on March 03, 2004, 22:46

This may have nothing at all to do with PC-Pals, as it may well be a coincidence.

As some of you will know, I use Sygate Pro firewall, as it is unobtrusive, so unobtrusive that I have allowed taskbar alerts.  The thing is, everytime I come on to Pals, I get the following alert:

Unsolicited incoming ARP reply detected, this is a kind of MAC spoofing that may consequently do harm to your computer.
Packet data is shown in the right window.

The packet data is:

0000:  44 45 53 54 00 00 20 53 : 52 43 00 00 08 06 00 01 | DEST.. SRC......
0010:  08 00 06 04 00 02 20 53 : 52 43 00 00 CF 73 3D E0 | ...... SRC...s=.
0020:  44 45 53 54 00 00 3E 35 : 28 65 00 A4 1C B9 56 6D | DEST..>5(e....Vm
0030:  C8 F7 50 10 21 80 79 98 :                         | ..P.!.y.        

As I say, it may just be a coincidence that  it appears when I come onto Pals, as this is always the first site  I visit when I come onto  the internet.  Does anyone know what this means?

Thanks.

Title: Re:ARP Reply Detected
Post by: Adept on March 04, 2004, 07:29

The only information on this I can find by Googling seems unfortunately to be in Dutch or something???

http://gathering.tweakers.net/forum/list_message/19191013

As long as the firewall is blocking it you should be OK.

Title: Re:ARP Reply Detected
Post by: chorleydave on March 04, 2004, 19:46

Thanks for looking, Adept.   :)

It's really more of an annoyance than a worry.  I asked the Head of IT Skills at college about it, but she couldn't throw  any light on it.  I've now changed my  start page in Opera from PC-Pals to Blank, and have started to connect through Dial-Up Networking rather than the Windows dialer.  I'll keep an eye on it, as I am sure it is something to do with an auto-update to my AV, Firewall, Digiguide, etc, rather than any particular website.

Thanks again.

Title: Re:ARP Reply Detected
Post by: chorleydave on March 08, 2004, 18:34

Well, it would seem that my suspicions have been confirmed.  I have turned off all auto-updates.  In fact, I haven't updated anything for several days, and it hasn't appeared.  Next job is to manually update my programs (I'll probably do just one program every day for a week, starting with anti-virus, as it is probably the most important to keep updated) and see what happens.  ???  When I've detected the culprit, I'll let you know.