Protonon 0 Posted September 16, 2022 Share Posted September 16, 2022 Hi all im having problem with my samsung tv in my company i have 4 tv showing commercial and is connected to my network for commercial updates. Everyday my network dies on me and i didnt know what it was thought it was a virus but it wasnt. My Eset security started to act weird spamming arp attack when the network crashes. I watched the logs and it shows me 2 of my 4 tv are arp poison attacking my network i disconnected them from my network and the problem is solved. What could be the issue that my samsung tv is causing arp attack? Its not just killing the router on my lan connections it kills my network in the computers also. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,277 Posted September 16, 2022 Administrators Share Posted September 16, 2022 Is the TV connected to LAN both via wi-fi and wire? Link to comment Share on other sites More sharing options...
Protonon 0 Posted September 16, 2022 Author Share Posted September 16, 2022 16 minutes ago, Marcos said: Is the TV connected to LAN both via wi-fi and wire? Its connected to wifi only here is the log file for my network arp.txt Link to comment Share on other sites More sharing options...
Administrators Marcos 5,277 Posted September 16, 2022 Administrators Share Posted September 16, 2022 It's obvious that an ARP response on querying for IP 192.168.1.106 was returned from 2 different MAC addresses a4:30:7a:5c:c5:de and a4:30:7a:5c:c6:06 which triggered the detection. Since you trust the device, create the appropriate IDS exception. Link to comment Share on other sites More sharing options...
Protonon 0 Posted September 16, 2022 Author Share Posted September 16, 2022 (edited) 1 hour ago, Marcos said: It's obvious that an ARP response on querying for IP 192.168.1.106 was returned from 2 different MAC addresses a4:30:7a:5c:c5:de and a4:30:7a:5c:c6:06 which triggered the detection. Since you trust the device, create the appropriate IDS exception. Yeah but i wonder if i put it in ids exception will it still kill my lan network? Thoose differenet mac adress are thoose 2 tv causing the arp Edited September 16, 2022 by Protonon Link to comment Share on other sites More sharing options...
Protonon 0 Posted September 23, 2022 Author Share Posted September 23, 2022 Removed the tvs from my network and everything works fine now i bought a 4g router instead for them so they can update commercials Link to comment Share on other sites More sharing options...
Recommended Posts