Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

we have a product which runs on windows XP embedded SP1. We add a fake(does not exists) MAC address for a fake IP in ARP table. When there is a communication happening Windows sends packets to the fake MAC and fakeIP and later we change it to real ones in a driver. This is how the software is designed.

The problem is sometimes windows starts sending ARP requests for the fake IP even though it has entry for that in ARP table. I had no clue why this is happening and in blind attemp to reproduce the issue i wrote a script to delete ARP entry and add it again after some seconds. After some attemps I saw the problem happening.

Any ideas about what should i check/change?

Thanks a lot!

share|improve this question

Are you witnessing an ARP probe? (

You might also try turning off the gratuitous ARP requests... Unfortunately I'm not sure how to do that with Embedded XP(here's how to do it on Win2K8/Vista - This could definitely be an issue if the network interfaces are being changed at all or if you have duplicate IP and/or MAC addresses on your network segment broadcasting.

Good luck!


share|improve this answer
Thanks, but i dont think this is the case as ARP requests are sent for Gateway IP not the IP of the interface. – Ratnesh Maurya May 5 '11 at 10:05

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.