Welcome Guest ( Log In | Register )

 
RSS feedBump TopicReply to this topicStart new topicStart Poll

Outline · [ Standard ] · Linear+

> ARP table, weird

mystical zero
post Apr 15 2007, 11:35 PM


Enthusiast
*****
Group: Senior Member
Posts: 876

Joined: Nov 2005
From: /root/Melbourne


QUOTE
Interface: 192.168.0.121 --- 0xb
  Internet Address      Physical Address      Type
  192.168.0.1          00-15-e9-d7-d7-5c    dynamic
  192.168.0.255        ff-ff-ff-ff-ff-ff    static
  224.0.0.22            01-00-5e-00-00-16    static
  224.0.0.252          01-00-5e-00-00-fc    static


Above are the entries obtained from my windows vista's arp table.

As most of us normally know, the arp table normally displays ip address within the LAN range in conjunction with the MAC address. But, there's something weird about my arp table above. Note the ip address i bolded. As an effort to get rid of the above bolded ip, i try using the arp -d command. Although successful, the bolded ip are being cache to the arp tables again when i connect to the LAN.

It is weird to have such ip outside my LAN range. Due to my curiosity, i did a whois lookup on the bolded ip. These are the outputs:

CODE
OrgName:    Internet Assigned Numbers Authority
OrgID:      IANA
Address:    4676 Admiralty Way, Suite 330
City:       Marina del Rey
StateProv:  CA
PostalCode: 90292-6695
Country:    US

NetRange:   224.0.0.0 - 239.255.255.255
CIDR:       224.0.0.0/4
NetName:    MCAST-NET
NetHandle:  NET-224-0-0-0-1
Parent:    
NetType:    IANA Special Use
NameServer: FLAG.EP.NET
NameServer: STRUL.STUPI.SE
NameServer: NS.ISI.EDU
NameServer: NIC.NEAR.NET
Comment:    This block is reserved for special purposes.
Comment:    Please see RFC 3171 for additional information.
Comment:    
RegDate:    1991-05-22
Updated:    2002-09-16

OrgAbuseHandle: IANA-IP-ARIN
OrgAbuseName:   Internet Corporation for Assigned Names and Number
OrgAbusePhone:  +1-310-301-5820
OrgAbuseEmail:  *****@iana.org

OrgTechHandle: IANA-IP-ARIN
OrgTechName:   Internet Corporation for Assigned Names and Number
OrgTechPhone:  +1-310-301-5820
OrgTechEmail:  *****@iana.org


Well, it looks legit at first as it originates from IANA.

Hmm....i was wondering why IANA's ip is listed in my arp table. Can someone enlighten me about this? Is my LAN being intrude by outsiders?

Any help will be appreciated.

This post has been edited by mystical zero: Apr 15 2007, 11:48 PM
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
spayre
post Apr 16 2007, 12:07 PM


hush puppy
******
Group: Senior Member
Posts: 1,181

Joined: Jan 2003
maybe it is ur public ip address range?
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
PKGreat
post Apr 16 2007, 12:16 PM


On my way
****
Group: Senior Member
Posts: 564

Joined: Nov 2005
From: Kajang / Subang Jaya


maybe it is microsoft security port. for update purpose.

regards
User is offlineProfile CardPM
Go to the top of the page
+Quote Post

Bump TopicReply to this topicTopic OptionsStart new topic
 

Switch to:
| Lo-Fi Version
0.0285sec    1.82    5 queries    GZIP Disabled
Time is now: 25th April 2014 - 05:42 AM