Address Resolution Protocol is a layer 2 networking protocol used for resolving layer 3 addresses (such as IP addresses) into layer 2 addresses (such as Ethernet MACs). It is used by network devices when communicating with devices on the same layer 2 network.

learn more… | top users | synonyms

1
vote
2answers
135 views

Is Windows Server 2008 R2 arp cache per user or per machine?

When running arp -a in a Windows Server 2008 R2 prompt, will the returned entries cover connections from all users logged on to the machine or only the current?
1
vote
1answer
195 views

How to convert proxy ARP setup to IPv6?

My company has a router/firewall deployed with the "common" Proxy ARP setup: it sits between some servers and the ISP gateway, and intercepts all the packets with proxy arp, so that it can apply both ...
0
votes
0answers
190 views

Ubuntu 12.04 reply ARP request delay 10+ seconds

I'm running Ubuntu 12.04 in VirtualBox, my server program is running in it, its IP is 192.168.1.105. My client is running at 192.168.1.107. But the client alway took 10+ seconds to send a package to ...
2
votes
1answer
1k views

Networking ARP table in windows cmd

I am reading the book practical packet analysis and I have just learned the fundamentals of the ARP protocol. They also added something about the arp -a cmd command. I'm curious about some of the ...
1
vote
2answers
516 views

Windows Domain controller ARPing for 169.254.0.0/16 addresses

I've been doing some sniffing on my company's network to try to clean up some of traffic and have noticed that one of our Server 2008 Domain Controllers is sending out ARP's every second or two to ...
1
vote
2answers
2k views

Physical switch not learning MAC address of virtual machines

I have a virtual environment running vSphere 5.1. I have two ESXis with a vDS between them. There is, for the purposes of the discussion, just one portgroup on that vDS configured to use a VLAN. The ...
0
votes
1answer
262 views

arpd does not send ARP requests

Sometimes a botnet (or whatever) tries to port scan pretty much all IPs in the internal network (two /21 subnets) in one second. As a result the router sends out a lot of ARP requests and some slower ...
1
vote
1answer
115 views

iptables arp compare and execute

EXAMPLE: iptables :internet - [0:0] -A internet -m mac --mac-source 48:5D:60:FC:29:B0 -j RETURN COMMIT [root@localhost:~ ] $ arp Address HWtype HWaddress Flags Mask ...
1
vote
1answer
67 views

Understanding ARP traces during OS load

Consider the following ARP packets captured while a unix machine was booting. From the packets I understand that this machine whose MAC address is 00:22:22:22:22:22 is requesting information about ...
2
votes
0answers
253 views

Keepalived failover not working for Static NAT target behind Cisco ASA

I've got a Cisco ASA[0] with a pair of Linux boxes in the DMZ running Keepalived and HAproxy acting as a load-balancing failover pair for another pair of Windows servers, also in the DMZ. I'm ...
1
vote
1answer
79 views

Move IP from one server to another without disruption

I have an internal DNS server running on a VM. I've rebuilt the server from scratch in a new VM, and I want to cut over from the old to the new at some point. In order to do this, I'll need to take ...
2
votes
0answers
158 views

I am not able to connect to my server from my leased line internet connection

I am having some troubles connecting to my Fedora server from my static IP ISP connection. Usually I can ping that server with no problems. But other times it just gives me timeout responses. When ...
1
vote
1answer
2k views

ARP response is not present on the other port of linux bridge based on ubuntu 13.10

I recently build linux based bridge for packet monitoring purpose, but there is BIG problem. the environment is, overall env. target of monitoring is VMs on vSphere. two vSwitches are configured ...
2
votes
2answers
2k views

Multiple NIC arp issue

I'm troubleshooting an issue on Centos 6.4. I have a few systems setting up for greenplum. Each one has two "interconnect" interfaces connecting to an isolated subnet. It is like a cluster ...
6
votes
1answer
1k views

Linux arp cache timeout values

I'm trying to configure sane values for the Linux kernel arp cache timeout, but I can't find a detailed explanation as to how they work anywhere. Even the kernel.org documentation doesn't give a good ...
15
votes
5answers
17k views

ARP broadcast flooding network and high cpu usage

Hoping someone here might have some insight to the issue we are facing. Currently we have Cisco TAC looking at the case but they are struggling to find the root cause. Although the title mentions ARP ...
2
votes
0answers
172 views

Solaris 10 invalid ARP requests from 0.0.0.0? Link up/down every hour or 2

The guys at the data center where I'm hosting a server running Solaris 10 are telling me that my server is making a lot of invalid arp requests. This is an example of a portion of what was sent to me ...
1
vote
2answers
191 views

How to capture arp table when using network bridging?

I have a computer with 2 NICS that are bridged and I need a means of distinguishing between machines connected to eth0 from machines connected to eth1. I was hoping to use something like the "arp -a" ...
-5
votes
2answers
1k views

Can a computer route IP trafic between two LAN if it is not configured as gateway? [closed]

Having two LAN, each one have its own gateway, DHCP and internet connexion LAN 1 - IPs: 192.168.0.0-255, Mask: 255.255.254.0, Gateway: 192.168.0.1 LAN 2 - IPs: 192.168.1.1-255, Mask: 255.255.254.0, ...
1
vote
1answer
80 views

Host not showing in ARP even after broadcast

serverfault community. What I would like: to determine the current IP of a host (a networked camera to be specific) What I have: its MAC, its previously documented hostname and IP What I have ...
-1
votes
1answer
199 views

How to discover devices other subnet [closed]

Printers like some thermal I have tried Bixolon and samsung laser printer ,even mikrotik router have a tool where they discover the device via its mac address.No matter what the ip is. And they ...
1
vote
0answers
112 views

ARP Tables on Windows vs Linux

I noticed on Windows Server 2008, Windows Server 2008 R2, and Windows 7 that IP multicast groups joined by a computer are recorded in the ARP table as static addresses automatically. However, the same ...
3
votes
1answer
247 views

Same network on different interface

We work with devices that are flashed (factory) using TFTP on a usb network connection. The server has a fixed 192.168.2.100 address and the device a fixed 192.168.2.101 address. When it starts, it ...
0
votes
2answers
288 views

Excessive ARP request with no reply

I had been monitoring our LAN setting due to slow bandwidth. In the wireshark, I am seeing an ARP request that is never resolve to a MAC address from the same IP address. I did a NMAP scan, the ...
2
votes
2answers
584 views

Why do all computers on my network have the same MAC address?

I'm on a LAN provided by an ISP. My computer has its IP address, Subnet Mask, Default Gateway, DNS Servers(using DHCP). I just wanted to see the MAC addresses of all the computers on my LAN. After ...
-1
votes
1answer
2k views

How to resolve an IP address to hostname

This is my first time trying to work with an ARP so I'm slightly lost as to what I'm missing. I'm probably going down the wrong track, so lemme know if I'm completely and utterly off. What I'm trying ...
0
votes
1answer
533 views

Cannot ping gateway

I replaced my aging fileserver with a new server running ESXi 5.1 and migrated my fileserver in a virtual machine running on it. Now I have the following problem with this VM: I'm getting the ...
0
votes
2answers
2k views

Multiple NICs with IPs from same network at Linux host respond to a single MAC

CentOS host is armed with multiple NICs. All NICs are bound to the same subnetwork (let it be 10.0.0.0/24). Their IP configuration is provided with DHCP server (as reservations). While trying to get ...
-1
votes
2answers
601 views

ARP Command doesn't display all devices

I have a machine on my network that needs to create a list of all mac addresses connected to the network. This is running OSX when I run the arp command it doesn't always display everything connected ...
1
vote
0answers
756 views

VMWare ESXi 5.0 Networking Issue

I have an issue with 2 new ESXi hosts. OS - ESXi5.0 Custom Dell ISO patched up to Build 1024429 DELL R820 with 1G network 2 ports from integrated MB NIC(Intel) connected to 2 juniper switches, one is ...
2
votes
0answers
61 views

ipwatchd detects non-existing conflict?

Ipwatchd is telling me about a conflict that I just do not understand. As far as I can tell, there is no conflict. Am I reading the message wrong? It's a Xen machine with the following network ...
1
vote
2answers
1k views

Broadcom Advanced Control Suite 4 on a PowerConnect 2848 making router (ASA5505) throw ARP errors when TEAMING (different MAC addresses from same IP)

For some reason the Broadcom Advanced Control Suite 4 seems to be a little buggy OR I have not configured something correctly. I have 4 Gb NICs and I team 3 of them to make a virtual adaptor... ...
4
votes
1answer
468 views

Cannot ping B from A until B pings A

I have a server cluster all connected on a local network(all physical machines, not virtual). When trying to ping from Server A to B, I get a Desitination Host Unreachable. I can ping from B to A no ...
1
vote
0answers
67 views

Can you SNMP poll the ARP table on Cisco ACE?

I'm trying to get a MAC <=> IP mapping from a Cisco ACE. Unfortunately according to this table, while it supports IP-MIB the ipNetToMediaTable and ipNetToPhysicalTable subtrees are not supported. ...
1
vote
2answers
304 views

Can a duplicate computer name be known before attempting to join the domain?

Techs in the field are deploying windows 7 pcs onto a domain. They complete one entry screen, which should give them a unique computer name. However, they are human and end up giving the pcs the ...
0
votes
0answers
595 views

Trouble directing traffic to Honeyd virtual hosts

I am trying to set up an experiment to observe some network behavior and as part of that experiment I am setting up a closed LAN that has virtual hosts created by Honeyd. I have honeyd running one ...
4
votes
3answers
4k views

Wireshark running on a server seeing lots of `ARP who has` with different tells

We're seeing some suspicious network activity, and when I was trying to see if it was one particular server of ours I ran a Wireshark trace. I noted a lot of ARP packets asking who has x.x.x.x, but ...
3
votes
1answer
489 views

Windows Server 2008 ARP Cache Poisioning

Recently ran into a very strange problem. Several applications were having issues communication through our F5 Load-Balancer. When we looked into it we found that the router had an incorrect ARP and ...
2
votes
0answers
78 views

Can ARP with IP aliases on Windows be made to behave like on Unix?

On FreeBSD, when I have one interface with two IPs: ifconfig nic0 192.168.0.1 netmask 255.255.255.0 ifconfig nic0 alias 192.168.0.2 netmask 255.255.255.255 If I ping the alias, if the host I'm ...
-3
votes
1answer
240 views

automatic scanning for duplicate IPs - program needed [closed]

we need a solution to automatically scan for IP conflicts our subnet (192.168.0.x / 255.255.255.0) multiple times a day, and alert us if one is found. At the moment I use the arping program under ...
2
votes
1answer
2k views

Which are the possible reasons for an arp request that is not being solved/answered?

This weekend I was testing a new data link connection from a service provider, and I went through some address resolutions problems. I tested reachability to hosts at the far end using a laptop on my ...
1
vote
0answers
154 views

Keepalived, Junos, and ARP caching

I'm trying to configure an active-passive stunnel setup, with the aid of Keepalived, for a public IP address at our company datacenter. I would like to know if a router or switch reconfiguration is ...
1
vote
1answer
657 views

Permanant ARP entries become Unresolved

We have a solution where a number of Solaris servers are in a private VLAN and no arp proxies exist in this VLAN, so to reach neighboring servers we must add static arp entries. Each other server in ...
2
votes
1answer
462 views

ARP/Mac address table

What is the difference between a mac address table and an arp table? Is it correct to say only one arp cache is kept for each switch which self learns to forward information to another host, and every ...
2
votes
3answers
2k views

Linux machine does not answer an ARP request

We have this situation: A router, which is an Ubuntu VM, has multiple VLAN interfaces on the same physical NIC. Those VLAN interfaces are dynamically configured and torn down and attached to networks ...
1
vote
1answer
495 views

Broadcom NetXtreme II GigE Teaming Does Not Use Unique MAC, Causing Collisions

I currently have a new Dell server on my local (inside) network that I have setup to use three of the four nics to create a team. Examples below. NIC_1 - mac: 000000000001 - ip: n/a NIC_2 - mac: ...
1
vote
1answer
127 views

How to decrease linux box arp response?

I had known that I can not stop arp flood from others, so I wonder to know how can I decrease the response times per second, so that my cpu wont cost too much for arp flood, any tips?
2
votes
2answers
564 views

arp packet received larger than packet sent, why?

I'm trying to debug a networking issue. During this process, I've noticed that when I try to do an arping, the received arp packets are larger than sent arp packets, as outputted by tcpdump. (Note ...
4
votes
1answer
476 views

tcpdump on interface when pinging nonexistent hosts on local network

I've statically configured the IP address of an interface on a server: ip addr add 10.40.0.6/16 broadcast 10.40.255.255 dev eth1 If I try to ping a machine on the network (e.g., 10.40.0.1), it ...
12
votes
2answers
3k views

arp-requests cannot be seen by specific nodes

I create an open ad-hoc wlan by using iwconfig (I have the same issue with wpa_supplicant as well). there are 4 nodes on the network as seen on the figure below. The nodes run ubuntu 12.04 and debian ...