Ethereal-users: Re: [Ethereal-users] Possible Virus / Trojan / ?????

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Marco van den Bovenkamp <marco@xxxxxxxxxxxxxxxxxxx>
Date: Fri, 12 Sep 2003 08:19:21 +0200
Brett Wheeler wrote:


There appears to be a few machines (I've identified 3 so far) apparrently
mapping the network with ARP packets. They send out arp requests to all
machines on their subnet, ie. PC# 172.18.1.120/16 has sent arp requests to
all addresses from 172.18.0.1 to 172.18.255.254.

Has anyone seen/experienced/heard of similar? or what caused it?
Have you upgraded any HP printer drivers on the affected boxes? If you do a full install of those, it (used to? It has been a while since I saw it last) installs JetAdmin, and that will poll the entire subnet it's on to find HP printers. 

--

		Regards,

			Marco.