>  A special-purpose ARP tool that just sent ARP requests for a bunch of
> selected IP addresses might be a bit more gentle on the net, but hey,
> whats a good hack if you can't cause a packet storm every now and
> then? ;-)

I've sent an LLC1 'test' packet to ff:ff:ff:ff:ff:ff (from ff:ff:ff:ff:ff:ff
for good measure) used to get about 600 replies!  Mind you, even though
some systems failed to swap the LSAPs properly (command/response bit not
getting cleared because of the broadcast dlsap) traffic soom died down.....
(we fixed that bug though).

    David