Address Resolution Protocol is a layer 2 networking protocol used for resolving layer 3 addresses (such as IP addresses) into layer 2 addresses (such as Ethernet MACs). It is used by network devices when communicating with devices on the same layer 2 network.

learn more… | top users | synonyms

1
vote
1answer
137 views

arp problems with transparent bridge on linux

I've been trying to secure my virtual machines on my esx server by putting them behind a transparent bridge with 2 interfaces, one in front, one at the back. My intention is to put all the firewall ...
2
votes
2answers
1k views

How can I configure permanent arp entries on Red Hat Enterprise Linux?

I'm configuring a Red Hat Linux server which will be sending UDP packets out but never receiving ARP responses. So a static ARP entry is required. The obvious way to do this is. arp -s 10.0.0.1 ...
1
vote
1answer
1k views

How to setup a static multicast ARP entry with Cisco SG300?

We're running a Microsoft NLB cluster in multicast mode as a loadbalancer. Using our old Cisco IOS switches we propagate access to the cluster to our branches using a static ARP entry in the core ...
0
votes
0answers
16 views

How to fix stalled connection on large download

I have a cisco 1921 router performing routing and NAT function. Cisco 3750 is performing layer 3 core switching duties. Users are complaining about large file transfers being stalled (not dropped) ...
1
vote
1answer
33 views

Directed ARP requests do not arrive at bridge interface

I'm baffled by the following weird bridge/arp behavior under Linux. It somehow seems to filter directed ARP requests, whereas it should forward them to the other end of the bridge. To test, I run the ...
0
votes
2answers
25 views

Windows 8 is not always selecting correct network card for my outgoing transmissions

The company I work for builds and sells industrial machines. One of our products is a machine which is controlled by a PC running Windows. This particular machine uses a networked device with ...
-1
votes
0answers
21 views

why not “multiple nics of a server on one subnet” in linux? [duplicate]

There is a case that when you have multiple nics of a server are in same subnet, you will get same mac address of those two ips from other machines in ARP behaviors. The reason is that, n linux, ...
0
votes
0answers
19 views

X520-DA2 10GbE PCIe NIC on Ubuntu 12.04 doesn't respond correct ARP information for a traffic tester

I'm trying to configure stand-alone test network to examine a server that has two 10GbE ports PCIe NIC. But I couldn't get any ARP responses of those 10GbE ports. To execute my test, it's necessary to ...
0
votes
0answers
24 views

SYN-ACK with identical MACs

What could cause a CentOS machine to respond with SYN-ACK packet having both source and destination MACs set to the address of the NIC from which the packet is being sent?
2
votes
1answer
978 views

Linux machine does not answer an ARP request

We have this situation: A router, which is an Ubuntu VM, has multiple VLAN interfaces on the same physical NIC. Those VLAN interfaces are dynamically configured and torn down and attached to networks ...
3
votes
1answer
939 views

ARP reply vanishes from br0 to tap0 using OpenVPN in bridging mode

i have setup a linux box (on an esxi5) which acts as an openvpn server. the server is configured to use bridging for the clients, which essentially works, with one exception. if the client pings some ...
0
votes
1answer
46 views

Group Policy for Time Sync = ARP Flood?

I have a Windows Server 2008 R2 domain controller and a bunch of workstations of various versions of Windows - XP SP3, Vista, 7, 8.1. Time sync wasn't working correctly on a few PCs so I followed the ...
0
votes
2answers
1k views

Ettercap - packet injection / alteration

So I have a proxy setup using squid on port 3128. I also have ettercap setup. My main goal is to change data as it flows through my proxy. Basically, you open up www.something.com using my ...
0
votes
0answers
23 views

Strange network issue when moving EC2 elastic IP

Recently we had an issue with a Windows 2012 EC2 server, which meant that we had to move across to another instance. We duplicated the instance, ran some tests and moved over the elastic IP. Should ...
1
vote
3answers
106 views

Switch behavior on unicast packets when the destination is unknown

Please let me start by saying I am no network expert, I am a programmer who does a fair amount of L3/4 programming. My question is that when a switch receives a packet with a destination MAC that is ...
3
votes
0answers
90 views

VMXNET3 nic loses the ability to update ARP table after N hours

I have a fedora 18 VM that stops updating the arp table on eth1 after running for a number of hours to days. There are other VMs on the same hypervisor that can access all of the same networks without ...
0
votes
2answers
2k views

arp -n responds with (incomplete) on the wrong subnet, can't remove it

context There are 2 servers: server1 - eth0 10.129.76.16 eth0.2 192.168.0.103 server2 - eth0 10.129.79.1 eth0.2 192.168.62.101 The 192.x.x.x addresses are connected to the ...
0
votes
2answers
69 views

Must an ARP broadcast query packet contain the target node's MAC address [closed]

So far as I know, Address Resolution Protocol (ARP), translates the IP address of a computer on a local network to an equivalent layer 2 address (MAC address), such as sending a packet from machine A ...
2
votes
1answer
100 views

Determine the hostnames of IP conflict

I have a network with several hundred machines on it. I have a machine that gives intermittent connectivity issues, reported via vSphere web client. This troublesome machine has the hostname ...
0
votes
3answers
94 views

Linux (Ubuntu 12.04) sending ARP requests over single interface

I have a system with custom hardware hooked up to 2 different ethernet ports on the same system. The interfaces are configured on the same subnet because the hardware (FPGA-based) has a hardcoded IP ...
0
votes
0answers
78 views

localhost answering wrong ip

No idea how/why, but here's what I'm seeing. Consider 3 CentOS 5.10 boxes: Host A [10.1.2.7] Host B [10.1.2.8] Host C [10.1.2.9] All of a sudden we're getting strange behavior from Host X, ...
-2
votes
3answers
66 views

Prevent Linux server host from using ARP

If I know all client will connect to the sever with the same MAC address and to the same interface, is it possible to prevent from server host to send ARP request for each new client IP it gets a ...
0
votes
0answers
343 views

Trouble directing traffic to Honeyd virtual hosts

I am trying to set up an experiment to observe some network behavior and as part of that experiment I am setting up a closed LAN that has virtual hosts created by Honeyd. I have honeyd running one ...
1
vote
1answer
153 views

“Destination Host Unreachable” and ARP returns no addresses over LAN

I am currently trying to setup LAN over two machines with a network mask of 255.255.255.0 however I am receiving the following message when trying to communicate between them both; [root@alpha ~]# ...
1
vote
1answer
86 views

network level of veth doesn't respond to arp

I decided to play with veth : create a veth pair and send a ping from one end to another. $ ip link add type veth $ ip addr add 192.168.99.1 dev veth4 $ ip addr add 192.168.99.2 dev veth5 $ ip link ...
1
vote
2answers
411 views

Physical switch not learning MAC address of virtual machines

I have a virtual environment running vSphere 5.1. I have two ESXis with a vDS between them. There is, for the purposes of the discussion, just one portgroup on that vDS configured to use a VLAN. The ...
1
vote
2answers
231 views

Windows Domain controller ARPing for 169.254.0.0/16 addresses

I've been doing some sniffing on my company's network to try to clean up some of traffic and have noticed that one of our Server 2008 Domain Controllers is sending out ARP's every second or two to ...
-2
votes
4answers
88 views

Find out IP of connected interface?

Suppose I connect two machines directly together with an ethernet cable. I know nothing about machine2's configuration - I only have access to machine1. What can I do on machine1 to determine ...
2
votes
2answers
305 views

ARP responds with single MAC address on Linux server with multiple interfaces on the same network

Linux server has 2 active network interfaces: IF:eth1 IP:192.168.1.1/24 MAC:11:11:11:11:11:11 (1GbE) IF:eth2 IP:192.168.1.2/24 MAC:22:22:22:22:22:22 (10GbE) The idea is that the ...
0
votes
1answer
41 views

Can Windows Populate Network List in an MPLS?

With an MPLS of one host and one remote, when I go to Windows Explorer and bring up "Network", is the list supposed to be populated with the devices on both subnets? If not, can it be made to do so? ...
0
votes
1answer
578 views

brctl bridge forwarding packets to promiscuous interfaces

I have two promiscuous sniffing interfaces on my linux box: eth0 is connected to an external vlan bridge eth1 is connected to an internal vlan bridge with eth0 I can sniff all traffic on my ...
1
vote
0answers
50 views

Duplicate entries in switch ARP table

A server is showing twice or more on my L2 switch ARP table Same IP address, mac address, and ethernet port. What could be causing this? Thanks
2
votes
1answer
154 views

nmap and arp-scan inconsistent IP-MAC results

I seem to get variable and inconsistent results for the IP/MAC addresses from a particular machine, using nmap or arp-scan. The machine has 3 interfaces, and this is what it shows: $ uname -a Linux ...
0
votes
1answer
63 views

what would happen when macchanger to gateway mac address? [closed]

I thought arpspoof GATEWAY_IP -t VICTIM_IP can be prevented by add a static arp entry on victim side, i.e. arp -s GATEWAY_IP GATEWAY_MAC I read ...
0
votes
0answers
115 views

Configuring VRRP with keepalived on two machines - interaction with proxy arp

Let's assume we have the following topology for our network: Host1------- Router1-------Router2----------Router3-------Host2 and we want to configure vrrp on the two hosts with keepalived so that ...
2
votes
2answers
341 views

Why do all computers on my network have the same MAC address?

I'm on a LAN provided by an ISP. My computer has its IP address, Subnet Mask, Default Gateway, DNS Servers(using DHCP). I just wanted to see the MAC addresses of all the computers on my LAN. After ...
1
vote
1answer
206 views

openvpn connects but does not work until server pings client

I'm trying to configure a connection using openvpn from a windows 7 client machine to a linux host. I'm using openvpn in the traditional routed mode using tap devices, and the configuration I'm using ...
1
vote
2answers
61 views

Is Windows Server 2008 R2 arp cache per user or per machine?

When running arp -a in a Windows Server 2008 R2 prompt, will the returned entries cover connections from all users logged on to the machine or only the current?
1
vote
1answer
82 views

How to convert proxy ARP setup to IPv6?

My company has a router/firewall deployed with the "common" Proxy ARP setup: it sits between some servers and the ISP gateway, and intercepts all the packets with proxy arp, so that it can apply both ...
0
votes
0answers
99 views

Ubuntu 12.04 reply ARP request delay 10+ seconds

I'm running Ubuntu 12.04 in VirtualBox, my server program is running in it, its IP is 192.168.1.105. My client is running at 192.168.1.107. But the client alway took 10+ seconds to send a package to ...
1
vote
1answer
246 views

Networking ARP table in windows cmd

I am reading the book practical packet analysis and I have just learned the fundamentals of the ARP protocol. They also added something about the arp -a cmd command. I'm curious about some of the ...
0
votes
0answers
44 views

Router Advertisement loopback

I have a machine acting as a router. To send out router advertisements it is running radvd. IPv6 enabled. When an interface is enabled (e.g. a link-local address is set) radvd will sent to all nodes ...
0
votes
1answer
193 views

arpd does not send ARP requests

Sometimes a botnet (or whatever) tries to port scan pretty much all IPs in the internal network (two /21 subnets) in one second. As a result the router sends out a lot of ARP requests and some slower ...
1
vote
1answer
78 views

iptables arp compare and execute

EXAMPLE: iptables :internet - [0:0] -A internet -m mac --mac-source 48:5D:60:FC:29:B0 -j RETURN COMMIT [root@localhost:~ ] $ arp Address HWtype HWaddress Flags Mask ...
2
votes
2answers
396 views

pfSense 1.2.3 can't talk ARP beyond a switch two hops away

I have the following devices on vlan93 on my network: pfsense (192.168.93.1) core-sw1 (192.168.93.2) edge-sw1 (192.168.93.3) pf-switch (192.168.93.100) devices (192.168.93.120) Physical ...
1
vote
1answer
50 views

Understanding ARP traces during OS load

Consider the following ARP packets captured while a unix machine was booting. From the packets I understand that this machine whose MAC address is 00:22:22:22:22:22 is requesting information about ...
2
votes
0answers
129 views

Keepalived failover not working for Static NAT target behind Cisco ASA

I've got a Cisco ASA[0] with a pair of Linux boxes in the DMZ running Keepalived and HAproxy acting as a load-balancing failover pair for another pair of Windows servers, also in the DMZ. I'm ...
1
vote
1answer
67 views

Move IP from one server to another without disruption

I have an internal DNS server running on a VM. I've rebuilt the server from scratch in a new VM, and I want to cut over from the old to the new at some point. In order to do this, I'll need to take ...
2
votes
0answers
94 views

I am not able to connect to my server from my leased line internet connection

I am having some troubles connecting to my Fedora server from my static IP ISP connection. Usually I can ping that server with no problems. But other times it just gives me timeout responses. When ...
1
vote
1answer
622 views

ARP response is not present on the other port of linux bridge based on ubuntu 13.10

I recently build linux based bridge for packet monitoring purpose, but there is BIG problem. the environment is, overall env. target of monitoring is VMs on vSphere. two vSwitches are configured ...