[nzlug] mac address / arp issues?

[Jim Cheetham]

On 05/10/2007, Antonio Broughton <antonio at flerwin.net> wrote:
> If this computer does have a ViRii... does anyone know why it would
> be stuffing up the arp table on the Linux server?

In order to make sure that all your network traffic is directed to it,
so it can scan the packets for interesting passwords &c, before either
dropping it, or passing it on to the real target.

You may have a virus using pcap on your machine now. As always, it's
safest to just erase the hard drive, and reinstall the OS from scratch
/ original distribution CDs. Trying to delete a virus is ... generally
pointless.

-jim