4
votes
3answers
2k views

Wireshark running on a server seeing lots of `ARP who has` with different tells

We're seeing some suspicious network activity, and when I was trying to see if it was one particular server of ours I ran a Wireshark trace. I noted a lot of ARP packets asking who has x.x.x.x, but ...
2
votes
4answers
777 views

Extremely high arp fllooding from the router

My subnet is 10.162.0.0/16. We have a router with a couple of interfaces. Gateway for my subnet is 10.162.0.1. The router is situated in another building and I haven't direct access to it. Line from ...
1
vote
1answer
805 views

How can I find out the source of arp request if it is in another subnet?

Our subnet is connected with other subnets with router. Using wireshark I see some arp requests coming to ip addresses of our subnet from the router. Such as Broadcast ARP 60 Who has ...
0
votes
1answer
455 views

Router is continually broadcasting the same ARP request, with the exact contents

I hope the question is clear and that this is correct place to post the question. My router is broadcasting the same ARP frame over and over (once every second). It's probably not a big deal, but I ...
5
votes
2answers
3k views

Why my laptop sends ARP request to itself?

I have just started to learn about protocols. While studying the packets in wireshark, I came across a ARP request sent by my machine to my own IP. Here is the details of the packet : No. Time ...
3
votes
1answer
1k views

Wireshark arp packets

In wireshark, after capturing some arp packets, what is the significance of all 1's in the destination field. of an Ethernet II frame?