Address Resolution Protocol is a layer 2 networking protocol used for resolving layer 3 addresses (such as IP addresses) into layer 2 addresses (such as Ethernet MACs). It is used by network devices when communicating with devices on the same layer 2 network.

learn more… | top users | synonyms

3
votes
4answers
290 views

How to find all hostnames (even laptops that aren't currently on the network) on a network?

I manage a network that has a lot of laptops. The users that use the laptops are frequently traveling. When someone gets a new computer I run into a problem determining what the hostname should be. ...
0
votes
1answer
68 views

IPv6: I'm confused about addresses [closed]

I'm starting studying IPv6 and I'm having some troubles understanding some aspects. Let's clarify if I'm getting this right! A single host may have: - a unicast global address - a link local address ...
0
votes
0answers
79 views

MAC address in arp table doesn't match actual MAC, why?

If I connect my laptop directly to the config port of a ubnt airFiber radio I can set a static IP to my laptop and access the default config page to change settings on the radio. When I look at the ...
2
votes
1answer
133 views

Windows 8.1 Limited Connectivity (on Steroids)

About two weeks ago we performed maintenance on our on-premise infrastructure in our office. Including applying updates to our Hyper-V-based virtual hosts, as well as our SAN. We also modified some ...
-2
votes
1answer
78 views

Why is there flooding on L2 but not on L3?

Why is it, that on L2 (when there is no MAC Table entry for a new packet) there is MAC Flooding. But at the same time on L3 there is an ARP request (when there is no entry in the ARP table for a new ...
1
vote
3answers
467 views

Scanning network devices by mac address

I work in the security devices industry and most of my work relates to IP cameras. Each camera manufacturer has their own software that scans the network for their cameras and gives details about ...
2
votes
2answers
138 views

New server unreachable for a time after swapping IP address

I am migrating nearly 20 websites from a win 2003 server to a win 2012 server. Both are VMware VM's, on different boxes, but in the same server room, and attached to the same switch. The 2003 server ...
3
votes
1answer
135 views

Default arp cache timeout

I didn't found how check and change the default arp cache timeout on Linux. I using debian with kernel 3.x (but I supposed it same with older kernels)
0
votes
2answers
154 views

arp table entry outside configured network

Can someone tell me why do I have arp table entry outside interface network? Server has 2 interfaces, both on the same network: eth0 10.10.34.146/22 eth1 10.10.33.188/22 ip route default via 10.10....
0
votes
0answers
267 views

ARP/ICMP in a network environment with overlapping IP address

Currently I have lab network setup to mimic customer's network deployment. (According to the customer, they are using VRF over VLAN so that their customer can have overlapping network connecting to ...
0
votes
1answer
59 views

Master and slave devices talking to each other through another device with two interfaces. All in the same network

I have three devices, one is a master which will talk with the slave and Device3 but it is only physically connected to the Device3. The slave will speak only with the master(also through the Device3)....
0
votes
2answers
92 views

Is turning off ARP a common practice?

I'm just trying to diagnose a problem I and a colleague have had on two separate occasions to swap out an old router with a new one. Both starting from scratch, we've found that we can't seem to ...
0
votes
1answer
102 views

Polycom VOIP phone seems to mask the secondary device's MAC address from a Cisco switch

When I have a Polycom VOIP phone plugged into a Cisco switch and a laptop plugged into the Polycom phone I get the following. 1) The phone goes into the voice VLAN as expected. 2) The laptop goes ...
1
vote
0answers
50 views

Broadcast ARP weirdness

we a running a router on a custom Linux box. Kernel is 3.14.14. What happens is that when you arping the router in broadcast only mode is the router has a verey slow response time: # arping -b -c ...
3
votes
1answer
124 views

Is it the normal behavior of arp requests?

Sometimes I dive into my network and often I see: tcpdump -n arp 17:59:15.754508 ARP, Request who-has 192.168.1.65 tell 192.168.1.212, length 28 17:59:16.754401 ARP, Request who-has 192.168.1.65 ...
1
vote
1answer
3k views

How to reverse arp using nping for Windows

I would like to send a reverse ARP to resolve an IP address given a MAC address using nping for Windows. The documentation is not clear on how this should work and I'm unable to find any examples ...
0
votes
4answers
96 views

Fault tolerance by using two IP with two interfaces

I would like to have a fault-tolerant setup for http requests. For brevity, let's assume we have a very simple Web-service and there is no difference which server responses. So I will have the ...
-3
votes
1answer
115 views

First Reply on Ping is Unreachable the rest is okay [closed]

please check this weird ping i'm having What may have caused this problem
2
votes
0answers
74 views

arp poisoning and mitm protection [closed]

I'm trying to understand mitm by arp poisoning. To do so I'm practicing on the network I manage: attacker : IPA victim : IPC gateway : IPG I use nighthawk, and kali linux (via virtual box). I can ...
1
vote
1answer
520 views

How to troubleshoot internet unreachable periodically through firewall

Periodically the internet is unreachable on my network, sometimes for 30+ minutes. After testing a direct connection to our modem, I realized this was not a problem with our ISP but the network itself....
2
votes
2answers
2k views

Linux is sending ARP requests to hosts in other subnets?

Setup Host B <--> Router <--> Host A Host A: IP = 192.168.1.10, Net = 192.168.1.0/24, VLAN = 1, Default GW = 192.168.1.1 (Router) Host B: IP = 192.168.2.10, Net = 192.168.2.0/24, VLAN =...
1
vote
0answers
327 views

Linux bridge not answering arp packets

I'm trying to setup a test scenario regarding linux bridges for which I need a full virtual IP stack. Basically, I'd like to simulate the network between a VM (or container) and its host, just without ...
1
vote
0answers
192 views

linux not replying to an arp request

I am running linux 3.14 on a system with 2 interfaces. on the first interface, i can access our local network. on the second interface, arp packets come in but linux doesn't send out reply. is it ...
1
vote
2answers
335 views

How is a TCP request routed from a virtual machine to an outside resource and back again?

Scenario: Computer A has a local ip of 192.168.1.100, which is running a VM inside of it. The VM now makes a tcp request to an external IP address (74.125.225.98). Could someone explain how the ...
0
votes
1answer
1k views

Cisco ASA 5510 needs “clear arp <Interface>” periodically to reach a single host

ASA 9.0(3) The symptom is that I can ping from the ASA to any other host in that interface's subnet, save one particular host (that host can ping the interface on the ASA however). If I do "clear arp ...
0
votes
1answer
100 views

iptables: service per physical interface

I have a vm on which I'm trying to configure (unsuccessfully) one service per physical device - i.e. ssh open only on eth0, http only on eth1 and ftp only on eth2. This has to happen regardless on the ...
-4
votes
1answer
1k views

How does Bind IP to MAC work? [closed]

A client is connected to the network with a DHCP server, but also has a Bind IP to MAC entry in the router. What is the sequence of steps that determine the final client IP configuration given that (1)...
0
votes
2answers
464 views

Why am I not getting an ARP reply with this request?

Using pcap_sendpacket in C, I'm manually sending the following packet on wlan0 (I've left out some fields, but I think they are correct): (Ethernet layer) eth src: <wlan0 MAC address> eth dest:...
1
vote
0answers
376 views

Broadcom NICs, Cisco ASA and ARP request collisions

First of all I am sorry for my english mistakes. Help me please to solve the problem with ARP request collision incidents. I have IBM BladeCenter E chasis with blade servers are installed in this ...
0
votes
2answers
608 views

External ip address being treated as local (ARP asking for external IP's address)

I am using a virtual machine with OpenWRT for routing, on a Linux machine (Slackware). I am trying to configure a host only interface (eth0) as the wan interface. eth1 is Ethernet attached as a bridge ...
0
votes
1answer
234 views

How can I tell what's happening to my packets?

I'm trying to bring up a little box on my network. I just reflashed the firmware and it's supposed to come up as 192.168.1.1 by default. My router is a DSL modem at 192.168.0.1; it usually uses a ...
0
votes
0answers
751 views

VMWare use of Gratuitous ARP REPLY

I have an ESXi cluster that hosts several Windows Server VMs and around 30 Windows workstation VMs. Packet captures show a high number of ARP replies of the form: -sender_ip: VM IP -sender_mac: VM ...
0
votes
2answers
541 views

Windows 8 is not always selecting correct network card for my outgoing transmissions

The company I work for builds and sells industrial machines. One of our products is a machine which is controlled by a PC running Windows. This particular machine uses a networked device with ...
1
vote
1answer
340 views

Directed ARP requests do not arrive at bridge interface

I'm baffled by the following weird bridge/arp behavior under Linux. It somehow seems to filter directed ARP requests, whereas it should forward them to the other end of the bridge. To test, I run the ...
0
votes
0answers
41 views

SYN-ACK with identical MACs

What could cause a CentOS machine to respond with SYN-ACK packet having both source and destination MACs set to the address of the NIC from which the packet is being sent?
0
votes
1answer
292 views

Group Policy for Time Sync = ARP Flood?

I have a Windows Server 2008 R2 domain controller and a bunch of workstations of various versions of Windows - XP SP3, Vista, 7, 8.1. Time sync wasn't working correctly on a few PCs so I followed the ...
1
vote
1answer
2k views

arp problems with transparent bridge on linux

I've been trying to secure my virtual machines on my esx server by putting them behind a transparent bridge with 2 interfaces, one in front, one at the back. My intention is to put all the firewall ...
0
votes
2answers
307 views

Must an ARP broadcast query packet contain the target node's MAC address [closed]

So far as I know, Address Resolution Protocol (ARP), translates the IP address of a computer on a local network to an equivalent layer 2 address (MAC address), such as sending a packet from machine A ...
2
votes
1answer
553 views

Determine the hostnames of IP conflict

I have a network with several hundred machines on it. I have a machine that gives intermittent connectivity issues, reported via vSphere web client. This troublesome machine has the hostname "...
0
votes
3answers
329 views

Linux (Ubuntu 12.04) sending ARP requests over single interface

I have a system with custom hardware hooked up to 2 different ethernet ports on the same system. The interfaces are configured on the same subnet because the hardware (FPGA-based) has a hardcoded IP ...
0
votes
0answers
203 views

localhost answering wrong ip

No idea how/why, but here's what I'm seeing. Consider 3 CentOS 5.10 boxes: Host A [10.1.2.7] Host B [10.1.2.8] Host C [10.1.2.9] All of a sudden we're getting strange behavior from Host X, 10.1....
-2
votes
3answers
84 views

Prevent Linux server host from using ARP

If I know all client will connect to the sever with the same MAC address and to the same interface, is it possible to prevent from server host to send ARP request for each new client IP it gets a ...
3
votes
1answer
249 views

VMXNET3 nic loses the ability to update ARP table after N hours

I have a fedora 18 VM that stops updating the arp table on eth1 after running for a number of hours to days. There are other VMs on the same hypervisor that can access all of the same networks without ...
1
vote
1answer
771 views

“Destination Host Unreachable” and ARP returns no addresses over LAN

I am currently trying to setup LAN over two machines with a network mask of 255.255.255.0 however I am receiving the following message when trying to communicate between them both; [root@alpha ~]# ...
2
votes
1answer
498 views

network level of veth doesn't respond to arp

I decided to play with veth : create a veth pair and send a ping from one end to another. $ ip link add type veth $ ip addr add 192.168.99.1 dev veth4 $ ip addr add 192.168.99.2 dev veth5 $ ip link ...
1
vote
3answers
2k views

Switch behavior on unicast packets when the destination is unknown

Please let me start by saying I am no network expert, I am a programmer who does a fair amount of L3/4 programming. My question is that when a switch receives a packet with a destination MAC that is ...
-2
votes
4answers
161 views

Find out IP of connected interface?

Suppose I connect two machines directly together with an ethernet cable. I know nothing about machine2's configuration - I only have access to machine1. What can I do on machine1 to determine ...
3
votes
2answers
1k views

ARP responds with single MAC address on Linux server with multiple interfaces on the same network

Linux server has 2 active network interfaces: IF:eth1 IP:192.168.1.1/24 MAC:11:11:11:11:11:11 (1GbE) IF:eth2 IP:192.168.1.2/24 MAC:22:22:22:22:22:22 (10GbE) The idea is that the ...
0
votes
1answer
123 views

Can Windows Populate Network List in an MPLS?

With an MPLS of one host and one remote, when I go to Windows Explorer and bring up "Network", is the list supposed to be populated with the devices on both subnets? If not, can it be made to do so? ...
0
votes
1answer
3k views

brctl bridge forwarding packets to promiscuous interfaces

I have two promiscuous sniffing interfaces on my linux box: eth0 is connected to an external vlan bridge eth1 is connected to an internal vlan bridge with eth0 I can sniff all traffic on my "...