Welcome Guest ( Log In | Register )

Forum Announcement

We are investigating a login problem that some members are having. Please try a different browser or "incognito mode" if you are facing it.

Bump TopicReply to this topicRSS feed Start new topic Start Poll

Outline · [ Standard ] · Linear+

> ARP table, weird

mystical zero
post Apr 15 2007, 11:35 PM, updated 9 years ago

Group: Senior Member
Posts: 876

Joined: Nov 2005
From: /root/Melbourne

Interface: --- 0xb
  Internet Address      Physical Address      Type          00-15-e9-d7-d7-5c    dynamic        ff-ff-ff-ff-ff-ff    static            01-00-5e-00-00-16    static          01-00-5e-00-00-fc    static

Above are the entries obtained from my windows vista's arp table.

As most of us normally know, the arp table normally displays ip address within the LAN range in conjunction with the MAC address. But, there's something weird about my arp table above. Note the ip address i bolded. As an effort to get rid of the above bolded ip, i try using the arp -d command. Although successful, the bolded ip are being cache to the arp tables again when i connect to the LAN.

It is weird to have such ip outside my LAN range. Due to my curiosity, i did a whois lookup on the bolded ip. These are the outputs:

OrgName:    Internet Assigned Numbers Authority
OrgID:      IANA
Address:    4676 Admiralty Way, Suite 330
City:       Marina del Rey
StateProv:  CA
PostalCode: 90292-6695
Country:    US

NetRange: -
NetName:    MCAST-NET
NetHandle:  NET-224-0-0-0-1
NetType:    IANA Special Use
NameServer: FLAG.EP.NET
NameServer: NS.ISI.EDU
NameServer: NIC.NEAR.NET
Comment:    This block is reserved for special purposes.
Comment:    Please see RFC 3171 for additional information.
RegDate:    1991-05-22
Updated:    2002-09-16

OrgAbuseHandle: IANA-IP-ARIN
OrgAbuseName:   Internet Corporation for Assigned Names and Number
OrgAbusePhone:  +1-310-301-5820
OrgAbuseEmail:  *****@iana.org

OrgTechHandle: IANA-IP-ARIN
OrgTechName:   Internet Corporation for Assigned Names and Number
OrgTechPhone:  +1-310-301-5820
OrgTechEmail:  *****@iana.org

Well, it looks legit at first as it originates from IANA.

Hmm....i was wondering why IANA's ip is listed in my arp table. Can someone enlighten me about this? Is my LAN being intrude by outsiders?

Any help will be appreciated.

This post has been edited by mystical zero: Apr 15 2007, 11:48 PM
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
post Apr 16 2007, 12:07 PM

hush puppy
Group: Senior Member
Posts: 1,204

Joined: Jan 2003
maybe it is ur public ip address range?
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
post Apr 16 2007, 12:16 PM

On my way
Group: Senior Member
Posts: 568

Joined: Nov 2005
From: Kajang / Subang Jaya

maybe it is microsoft security port. for update purpose.

User is offlineProfile CardPM
Go to the top of the page
+Quote Post

Bump TopicReply to this topicTopic OptionsStart new topic

Switch to:
| Lo-Fi Version
0.0586sec    1.46    5 queries    GZIP Disabled
Time is now: 5th October 2015 - 03:35 AM