Ross Vandegrift <r...@kallisti.us> writes:

> Well, not in this case.  But in the general case, if anyone accepted
> multicast MACs for ARP entries, it'd be easy to start causing your
> switches to flood more frames than they are switching.

I forgot that bit. Just reply with an unused MAC address, and there's
your denial-of-service. Multicast is less of a problem, on good
switches it'll only propagate to the hosts who subscribe.


/Benny


_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to