hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

manu
Hi,

I have been getting unusual problems in my network ... In a specific range of IP, everyone gets IP CONFLICT ... Not just me, it is random ... Everyone complains that they get conflict ... Anyone has any comments? .

There was a Virus MyTob in our network and it was cleaned ... Will it be a malfunctioning switch ? .. When I check the eventlog for th Mac address of the conflicted PC , i just get 00-00-00-00-00 only ... mad.gif

1. No dual DHCP issue
2. No loop

Manu smile.gif
packet
QUOTE(manu @ Jul 3 2005, 06:13 AM)
Hi,

I have beeing getting unusual problems in my network ... In a specific range of IP, everyone gets IP CONFLICT ... Not just me, it is random ... Everyone complains that they get conflict ... Anyone has any comments? .

There was a Virus MyTob in our network and it was cleaned ... Will it be a malfunctioning switch ? .. When I check the eventlog for th Mac address of the conflicted PC , i just get 00-00-00-00-00 only ...  mad.gif

Manu smile.gif
*



Make sure you don't have any loops in your network, that can cause IP conflits to occur. Also verify that you don't have dualing DHCP servers out there. After those obvious places you can start to look at perhaps someone using DSniff or other fun tools.

--P>G>>>
manu
Dsniff?? .. How can it make conflict? sad.gif ph34r.gif
... I am reading more about it .. smile.gif

Manu smile.gif
GSecur
Mnu, create a spanning port on your switches and then start sniffing with your favorite sniffer. Watch for IP addresses being used with different MAC addresses. Then start tracking them from there.
Partizaan
I had Mytob.FC on my network to. Its mail / worm (released on the 30-06). I read about it but that has nothing to do with the ip conflict.

I guess a router or so got reset maybe and two dhcp with same pool are giving ip adresses out. Also check WIFI devices.

// At my work when i am out and there is a problem the only solution they know is rebooting and resetting. When i get back i alway got to clean the mess up. (for here the frustration smile.gif ) //

Check arp. Maybe on servers u can do Arp.exe /a in cmd. (windows)
ip - mac. Maybe there are good adress res. prot. tools out there wich work ethernet based.





fak3
when i used to get ip conflicts in my home pc i set static mac for the gateway.this didn`t stop the nayghty message but my net connection was stand still.
manu
Solved. .

was a crap who brought an WL AP and connected to our N/w ... mad.gif .. He was playing hide and seek, connect for sometime and then disconnect ... Finally squeeezed the toy..

Manu mad.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.