Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have found out through Wireshark that a computer in my subnet scanning network ( sending ARPs for every IP-address in my subnet. Even if there no computers with such address).

It repeats infinitely. About 200 ARPs per sec from this computer.

10.162.4.41 Broadcast ARP 60 Who has 10.162.118.186? Tell 10.162.4.41

We have scanned this computer with several antiviruses and haven't found a malicious software.
What soft on computer can do infinite scanning?

share|improve this question
4  
Nice catch! I wish I had the time to track down these kinds of things. –  SpacemanSpiff Jun 21 '12 at 13:17
add comment

2 Answers

up vote 9 down vote accepted

Normally I'd use Sysinternals tools like tcpview and procmon to see if there were any odd programs or activity on the system.

Nothing strange in the logfiles?

It's also possible that your network card or network card driver is wonky and may need to be replaced or reinstalled.

Is this happening regardless of who's logged in? If the machine is first booted up it just starts doing this while sitting at a login prompt?

share|improve this answer
add comment

Turned out that it was a program Connectify. But I don't' know the reason, why it was probing all the subnet, when computer was connected via wire.

share|improve this answer
1  
It looks like it's the "Network Peer Scanning" feature in the software. Found that in the release notes, by Googling connectify arp. –  mfinni Jun 21 '12 at 15:56
    
Yes, it is Network Peer Scanning: "Turning off Network Peer Scanning will make Connectify no longer detect web servers and shared drives on other computers, but will also prevent it from issuing ARP packets onto the network. Both options can be found in the Connectify Menu under Advanced Settings." But it is only from 3.4.0.23678 version –  Enor Jun 21 '12 at 23:52
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.