Address Resolution Protocol is a layer 2 networking protocol used for resolving layer 3 addresses (such as IP addresses) into layer 2 addresses (such as Ethernet MACs). It is used by network devices when communicating with devices on the same layer 2 network.
Questions tagged [arp]
421 questions
2
votes
0 answers
arp poisoning and mitm protection
I'm trying to understand mitm by arp poisoning. To do so I'm practicing on the network I manage:
attacker : IPA
victim : IPC
gateway : IPG
I use nighthawk, and kali linux (via virtual box).
I can poison the victim by using arpspoof under kali…

tschmit007
- 146
- 5
2
votes
3 answers
Linux is sending ARP requests to hosts in other subnets?
Setup
Host B <--> Router <--> Host A
Host A: IP = 192.168.1.10, Net = 192.168.1.0/24, VLAN = 1, Default GW = 192.168.1.1 (Router)
Host B: IP = 192.168.2.10, Net = 192.168.2.0/24, VLAN = 20, Default GW = 192.168.2.1 (Router)
Router: IP =…

Deputy Rock
- 39
- 1
- 4
2
votes
3 answers
Best method and tools for local IP scanning
I’m starting to administer a small but confusing und badly documented local heterogeneous network (mostly Windows workstations, printers, laboratory equipment, etc. and one Linux/Samba Server) (192.168.1.0/24) stretching over a few hundred m2 office…

esc1729
- 305
- 2
- 16
2
votes
1 answer
Determine the hostnames of IP conflict
I have a network with several hundred machines on it. I have a machine that gives intermittent connectivity issues, reported via vSphere web client. This troublesome machine has the hostname "vsphere01".
I throw a crash cart on "vsphere01" and it…

cat pants
- 2,273
- 10
- 35
- 46
2
votes
1 answer
How to convert proxy ARP setup to IPv6?
My company has a router/firewall deployed with the "common" Proxy ARP setup: it sits between some servers and the ISP gateway, and intercepts all the packets with proxy arp, so that it can apply both filtering rules and traffic shaping for enforcing…

Giovanni Bajo
- 425
- 3
- 9
2
votes
1 answer
Networking ARP table in windows cmd
I am reading the book practical packet analysis and I have just learned the fundamentals of the ARP protocol. They also added something about the arp -a cmd command. I'm curious about some of the extra addresses, and I can't find much information…

AEGIS
- 21
- 1
- 4
2
votes
2 answers
Windows Domain controller ARPing for 169.254.0.0/16 addresses
I've been doing some sniffing on my company's network to try to clean up some of traffic and have noticed that one of our Server 2008 Domain Controllers is sending out ARP's every second or two to about 15 different addresses in the 169.254.0.0/16…

Andrew S
- 508
- 3
- 7
- 12
2
votes
0 answers
Keepalived failover not working for Static NAT target behind Cisco ASA
I've got a Cisco ASA[0] with a pair of Linux boxes in the DMZ running Keepalived and HAproxy acting as a load-balancing failover pair for another pair of Windows servers, also in the DMZ. I'm convinced Keepalived is working properly. I can…

Jamie MacIsaac
- 103
- 5
2
votes
0 answers
I am not able to connect to my server from my leased line internet connection
I am having some troubles connecting to my Fedora server from my static IP ISP connection. Usually I can ping that server with no problems. But other times it just gives me timeout responses. When this problem occurs I have to reboot the whole…

wael34218
- 321
- 2
- 5
- 15
2
votes
2 answers
Multiple NIC arp issue
I'm troubleshooting an issue on Centos 6.4. I have a few systems setting up for greenplum. Each one has two "interconnect" interfaces connecting to an isolated subnet. It is like a cluster interconnect. So each has eth2 and eth3 both in…

Billy K
- 121
- 1
- 3
- 16
2
votes
0 answers
Solaris 10 invalid ARP requests from 0.0.0.0? Link up/down every hour or 2
The guys at the data center where I'm hosting a server running Solaris 10 are telling me that my server is making a lot of invalid arp requests. This is an example of a portion of what was sent to me from the logs (with Mac addresses and IP…

JWD
- 21
- 2
2
votes
2 answers
How to capture arp table when using network bridging?
I have a computer with 2 NICS that are bridged and I need a means of distinguishing between machines connected to eth0 from machines connected to eth1.
I was hoping to use something like the "arp -a" command. However, when the NICS are bridged, the…

user975326
- 121
- 1
- 4
2
votes
2 answers
Why do all computers on my network have the same MAC address?
I'm on a LAN provided by an ISP. My computer has its IP address, Subnet Mask, Default Gateway, DNS Servers(using DHCP).
I just wanted to see the MAC addresses of all the computers on my LAN.
After applying subnet mask /18 or 255.255.192.0 on my IP…

claws
- 232
- 3
- 10
2
votes
5 answers
A strange arp issue
I have a problem with one of our solaris servers, an arp table entry is changing every so often for one of the other servers (WINSERVER) on the network.
It will start out with the correct MAC address for WINSERVER (10.10.10.1) but it is being…
jome
2
votes
0 answers
VMWare ESXi 5.0 Networking Issue
I have an issue with 2 new ESXi hosts.
OS - ESXi5.0 Custom Dell ISO patched up to Build 1024429
DELL R820 with 1G network 2 ports from integrated MB NIC(Intel) connected to 2 juniper switches, one is active, one is standby lose connectivity…

Danila Ladner
- 5,331
- 22
- 31