While checking the ARP table on my switches, I found many entries that shouldn't be there. Before going into further details, I would like to emphasize that I'm talking about the ARP table and not the CAM/mac-address table of the switch, as i have seen quite a few people use the two terms interchangeably .
So in my scenario, we have a large L2 network spanning across many switches. Some of the switches are managed through the dedicated management port (connected to the same management vlan) while some are managed through the the local vlan interface. There is no inter-vlan routing or such involved. AFAIK, the ARP table on these switches should ONLY contain the entries/mappings for those IPs that communicates with the management IP of the switch itself, for example, the NTP, syslog, monitoring servers etc. But in my case, I see multiple entries for other IPs in the network that should never need to access the switch or vice-versa.
What could be the reason for this sort of behavior?