Address Resolution Protocol is a layer 2 networking protocol used for resolving layer 3 addresses (such as IP addresses) into layer 2 addresses (such as Ethernet MACs). It is used by network devices when communicating with devices on the same layer 2 network.
Questions tagged [arp]
421 questions
0
votes
0 answers
VMWare use of Gratuitous ARP REPLY
I have an ESXi cluster that hosts several Windows Server VMs and around 30 Windows workstation VMs. Packet captures show a high number of ARP replies of the form:
-sender_ip: VM IP
-sender_mac: VM virtual MAC
-target_ip: 0.0.0.0
-target_mac:…

jma
- 109
- 1
- 3
0
votes
0 answers
SYN-ACK with identical MACs
What could cause a CentOS machine to respond with SYN-ACK packet having both source and destination MACs set to the address of the NIC from which the packet is being sent?

jackhab
- 771
- 1
- 8
- 21
0
votes
1 answer
Group Policy for Time Sync = ARP Flood?
I have a Windows Server 2008 R2 domain controller and a bunch of workstations of various versions of Windows - XP SP3, Vista, 7, 8.1. Time sync wasn't working correctly on a few PCs so I followed the directions found on this page:…

evilspoons
- 445
- 2
- 6
- 14
0
votes
2 answers
Must an ARP broadcast query packet contain the target node's MAC address
So far as I know, Address Resolution Protocol (ARP), translates the IP address of a computer on a local network to an equivalent layer 2 address (MAC address), such as sending a packet from machine A to B using level-2 switch.
It is therefore…
user218372
0
votes
3 answers
Linux (Ubuntu 12.04) sending ARP requests over single interface
I have a system with custom hardware hooked up to 2 different ethernet ports on the same system. The interfaces are configured on the same subnet because the hardware (FPGA-based) has a hardcoded IP address linked to the configuration of the…

dfreese
- 101
0
votes
0 answers
localhost answering wrong ip
No idea how/why, but here's what I'm seeing. Consider 3 CentOS 5.10 boxes:
Host A [10.1.2.7]
Host B [10.1.2.8]
Host C [10.1.2.9]
All of a sudden we're getting strange behavior from Host X, 10.1.2.3. Upon investigation and a bunch of telnetting…

Dan
- 61
- 2
0
votes
1 answer
Can Windows Populate Network List in an MPLS?
With an MPLS of one host and one remote, when I go to Windows Explorer and bring up "Network", is the list supposed to be populated with the devices on both subnets?
If not, can it be made to do so?
For background info, if I type arp -a at the…

bgmCoder
- 706
- 4
- 16
- 29
0
votes
1 answer
brctl bridge forwarding packets to promiscuous interfaces
I have two promiscuous sniffing interfaces on my linux box:
eth0 is connected to an external vlan bridge
eth1 is connected to an internal vlan bridge
with eth0 I can sniff all traffic on my "external network"
with eth1 I can sniff all traffic…

user2284355
- 455
- 2
- 10
- 24
0
votes
1 answer
what would happen when macchanger to gateway mac address?
I thought arpspoof GATEWAY_IP -t VICTIM_IP can be prevented by add a static arp entry on victim side, i.e. arp -s GATEWAY_IP GATEWAY_MAC
I read https://superuser.com/questions/17696/what-happens-when-two-pcs-have-the-same-mac-adress, but i still…

林果皞
- 111
- 5
0
votes
0 answers
Ubuntu 12.04 reply ARP request delay 10+ seconds
I'm running Ubuntu 12.04 in VirtualBox, my server program is running in it, its IP is 192.168.1.105.
My client is running at 192.168.1.107. But the client alway took 10+ seconds to send a package to server. I tcpdump on the server (192.168.1.105),…

Jee
- 1
- 1
0
votes
6 answers
Network routing issues on Linux
I was hoping someone out there would be able to look at this and let me know what I have missed. I have 4 machines and for some reason, only 1 of them can talk to the other 3 via their private IP address (on eth1).
The 4 machines are:
mach01 …

Peter Sankauskas
- 698
- 6
- 11
- 21
0
votes
2 answers
Excessive ARP request with no reply
I had been monitoring our LAN setting due to slow bandwidth. In the wireshark, I am seeing an ARP request that is never resolve to a MAC address from the same IP address. I did a NMAP scan, the requested IP address is not on the network. Does anyone…

user2668021
- 3
- 1
0
votes
2 answers
Cannot ping gateway
I replaced my aging fileserver with a new server running ESXi 5.1 and migrated my fileserver in a virtual machine running on it. Now I have the following problem with this VM:
I'm getting the correct IP via DHCP (reservation via MAC address…

Gerald Schneider
- 23,274
- 8
- 57
- 89
0
votes
2 answers
Multiple NICs with IPs from same network at Linux host respond to a single MAC
CentOS host is armed with multiple NICs. All NICs are bound to the same subnetwork (let it be 10.0.0.0/24). Their IP configuration is provided with DHCP server (as reservations).
While trying to get ARP entry remotely for some particular IP address…

s.zaprudsky
- 28
- 1
- 5
0
votes
1 answer
Multiple VLANs - how Linux / Debian process packets
I can't find answer about how linux processes incoming packets from different VLANs, that do not belong to a subnet assigned to a VLAN.
Imagine this situation. On Linux machine with the following configuration:
eth0.100 - assigned address from…

Rafal
- 3
- 1