This is one way of tracking and alerting on changes with MAC addresses.
http://freshmeat.net/projects/arpwatch-ng/?branch_id=56300&release_id=192222 On Apr 12, 2005 12:58 AM, Bojidar Tzendov <[EMAIL PROTECTED]> wrote: > Dear All, > > How can I discovery ARP poisoning on the LAN with an ISS solutions? > > Regards > Bojidar > > Bojidar Tzendov > > Test Solutions Company > > 25, Vaptsarov boul. > > Sofia 1407 > > Bulgaria > > Phone: +359 2 9696060 > > Mobile: +359 888 605 365 > > Fax: +359 2 9696069 > > ---------------------------------------------- > > This message is confidential for sending and receiving parties including > parties on CC and BCC. If you received this message by mistake or in any > illegal way, please, remove the message from all your systems and medias, > and immediately inform the sender. > > Since the e-mail transport environment is not enough secure in terms of > confidentiality, non-repudiation, integrity, and availability, the sender > does not accept the liability for any damages, misleads, and losses. > > ---------------------------------------------- > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf > Of Chan, Howard (Hong Kong S.A.R.) > Sent: April 11, 2005 6:11 AM > To: [email protected] > Subject: [ISSForum] Error on applying server sensor SP4.2 > > Hi all, > > I just applied server sensor SP 4.2 on a Win2k3 server and got the > following error. Could anyone help? Thanks! > > (server_sensor_1) - The Attack Signatures Module , C:\Program > Files\ISS\issSensors\server_sensor_1\\BlackICE\iss-pam1.dll failed > digital signature verification. > > Regards, > Howard > > PLEASE READ: The information contained in this e-mail is confidential and > intended for the named recipient(s) only. If you are not an intended > recipient of this e-mail you must not copy, distribute or take any further > action in reliance upon it and you should delete it and notify the sender > immediately. E-mail is not a secure method of communication. Nomura > International (Hong Kong) Limited cannot accept responsibility for the > accuracy or completeness of this message or any attachment(s). This > transmission could contain viruses, be corrupted, destroyed, incomplete, > intercepted, lost or arrive late. If verification of this e-mail is sought > then please request a hard copy. Unless otherwise stated any views or > opinions presented are solely those of the author and do not represent those > of Nomura International (Hong Kong) Limited. This e-mail is intended for > information purposes only and is not a solicitation or offer to buy or sell > securities or related financial instruments. > > _______________________________________________ > ISSForum mailing list > [email protected] > > TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to > https://atla-mm1.iss.net/mailman/listinfo/issforum > > To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] > > The ISSForum mailing list is hosted and managed by Internet Security > Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328. > > _______________________________________________ > ISSForum mailing list > [email protected] > > TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to > https://atla-mm1.iss.net/mailman/listinfo/issforum > > To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] > > The ISSForum mailing list is hosted and managed by Internet Security Systems, > 6303 Barfield Road, Atlanta, Georgia, USA 30328. > _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
