Hello, I have a small network with a Server 2008 AD/DNS server and Windows 7 clients - this network is setup to use only static IP addresses, and does not use DHCP (although the DHCP service is still enabled as it is needed for DNS). In my firewall logs I am still seeing TONS of BootP traffic - is this normal (even with static IPs)? If not, are there any ideas as to what could be sourcing all this BootP traffic (source IP is 0.0.0.0 in the logs, and source MAC is 0xFFFFFFFF)? Thanks!

Hi, From your description, I suspect your network encountered ARP attack. At this time, I recommend you updating your network firewall and double check its configuration. Meanwhile, please bind the IP address and the MAC address. If the issue persists, please upload your firewall logs here: http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65/ Kim Zhou TechNet Community Support

Hi, From your description, I suspect your network encountered ARP attack. At this time, I recommend you updating your network firewall and double check its configuration. Meanwhile, please bind the IP address and the MAC address. If the issue persists, please upload your firewall logs here: http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65/ Kim Zhou TechNet Community Support