Re: arpwatch

["zidan" <zidan00 () fastmail fm>]

I don't agree, arp requests are broadcasts. but response is not
broadcast, its unicast.
the answering source to the asking destination.

what I don't understand, is how can the arpwatch station can see this
packet if this is a switched network

-Z
-- 
  zidan
  zidan00 () fastmail fm

-- 
http://www.fastmail.fm - A fast, anti-spam email service.

---------------------------------------------------------------------------
Captus Networks 
Are you prepared for the next Sobig & Blaster? 
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans 
 - Precisely Define and Implement Network Security 
 - Automatically Control P2P, IM and Spam Traffic 
FIND OUT NOW -  FREE Vulnerability Assessment Toolkit 
http://www.captusnetworks.com/ads/42.htm
----------------------------------------------------------------------------