Questions tagged [arp]

For questions about Address Resolution Protocol (ARP). ARP resolves OSI layer-3 addresses to OSI layer-2 addresses.

Filter by
Sorted by
Tagged with
2
votes
3answers
90 views

Will pinging the multicast “all hosts” IP 224.0.0.1 fill my ARP cache with all hosts on my current subnet?

Just wondering in case I ever have a want / need to see all the hosts on my subnet.
1
vote
1answer
35 views

ARPs in WIFI Interface Monitor Mode

I set my WIFI interface to monitor mode. I did not expect to see any ARP requests. Can someone explain why there is ARP traffic?
1
vote
1answer
40 views

Packet analyze on router does not match client and server

thank you for your time. My (virtual) network has 3 objects : a client, a server and a router between them. I'm sniffing the traffic on the 3 machine with the command tcpdump -i any -s 0 -w [path] ...
0
votes
1answer
102 views

How to get IP address of device from its MAC address on network?

Though it seems possible duplicate of this question. But the need to ask this question again is to simplify the scenario and the demands to just finding the IP address of the device. The network in ...
1
vote
1answer
42 views

Arpping responding with Cisco ASA interface mac address and mac address of machine

For some reason our Cisco is responding to arp requests between machines on the same switch. It's not breaking anything but it is slowing initial connections. I've been making a lot of changes on the ...
1
vote
1answer
39 views

what are Hardware size and protocol size in ARP header? Attached image

While working on packet capture for a simple scan, just had a look at packet capture and want to know what does hardware size and protocol size means in a ARP header?
5
votes
1answer
103 views

Getting lot of unwanted broadcasts on my network

I am pretty new in Networking (noob), while I was monitoring my network using Wireshark, and I found that there is a lot of broadcasts happening all over the network, broadcast on Local network ...
1
vote
1answer
51 views

How data travel from a node to a destination IP address? [duplicate]

Let's say I have a lot of devices which connect to a single switch, and the switch itself connects to a router which provide Internet connection. Whenever an application on a node needs to ...
0
votes
1answer
28 views

Why we need Mac address to send Packets? [duplicate]

While sending a packet network layer attach the source and destination Ip addresses to it. But Data link layer need a destination Mac address in order to send the data through router or within a ...
0
votes
1answer
103 views

What is passive ARP learning and how does it work?

Is it the same thing as gratuitous ARP? I cannot find any good sources on the topic.
0
votes
1answer
92 views

Devices in same vlan cannot ping each other - ARP Issue [closed]

The environment is running with Nexus 9K in NXOS mode. Both are in vPC mode and running hsrp with N9K1 active and N9K2 standby. Due to vPC both nodes are running Active/Active for HSRP. Now the ...
-1
votes
1answer
92 views

How the broadcast MAC address accomplished?

The Layer 2 broadcast is the destination address of the Layer 2 package is FF-FF-FF-FF-FF-FF. I have a question about the broadcast MAC address. you see the ARP request, it send the destination MAC ...
4
votes
1answer
185 views

Cisco DAI / arp inspection limit

During a recent penetration test it was found that we didn't have dai set quite as tight as possible to fully stop things. I'm running Cisco 3750x if it matters. The interfaces are configured with ...
0
votes
1answer
97 views

ARP spoofing over WLAN

As I understand, in ARP spoofing (of any kind), there's a man in the middle that intercepts frames from a sender (Alice) by masquerading as a receiver (Bob) and passes this frame to the server by ...
0
votes
1answer
37 views

Prevent Users from Setting Specific Static IP

I have an HP procurve switching environment in which users are often assigned static IP's. One user changed their IP to 172.17.1.1 which is the core switch VLAN 10 interface. Since all the users in ...
0
votes
1answer
56 views

ARP source address behind a switch

I have an ECU sending ARP request to another ECU destination and it's working fine. the problem arises when I use an automotive switch in between. the source IP address is 192.168.0.12 the switch ...
0
votes
1answer
102 views

ARP after DHCP discover

Hey All, I was working on DHCP lab As seen in the below figure when I take a pcap between e2 and R1 [in a situation where i shutdown the f0/0 interface on R1 and startup again] I see an ARP ...
0
votes
2answers
63 views

Sending ARP query message to another subnet

Host E would like to send some data to Host B. Further assume that Host E doesn't have Host B's MAC Address. When the router is present between sub net 2 and 3 no ARP query message is send but when ...
2
votes
1answer
54 views

Is there a way of Juniper to avoid the vast ARP requests?

In my Juniper router the interface always send ARP requests for some non-using IP address. Is there any issue there? and whether there is a way of Juniper to avoid the vast ARP requests? Is it ...
4
votes
1answer
107 views

How do ARP requests work

So I may have a stupid question that mainly comes from me getting weird results to say the least while experimenting. I'm a bit unsure how do ARP requests work. For example how can I arp my entire ...
1
vote
0answers
46 views

Is this wireshark capture showing any issue?

I used Wireshark to capture the packets bellow: ... 350 18.942762436 d0:07:ca:0b:63:0c -> Broadcast ARP 60 Who has 13.210.32.75? Tell 13.210.32.78 351 18.947224197 d0:07:ca:0b:63:0c -> ...
0
votes
2answers
78 views

Why can't we have duplicated IPs?

This may be a really dumb question, but I like to turn upside down what I already know sometimes, that way I can learn more. For example, given a network 192.168.0.0/24, I have a device inside with ...
0
votes
1answer
39 views

ARP table updated when receive message

I'm studying networking and I have a question about when an ARP table should update. Consider this scenario: Host A has the MAC address of host B in its ARP table. Host B's ARP table is empty. ...
0
votes
1answer
61 views

ARP behaviors between hosts connected via switches

In a scenario like the following, where different hosts are connected via switches only, I'm not sure how the ARP packets will look like when A wants to send an IP packet to B. I assumed all the ...
4
votes
1answer
548 views

Why would a switch ever send an ARP request for a MAC address when it can just wait for the first packet to be received from a device?

I've been reading 'Windows Networking Fundamentals' and in that book it says that a switch can learn what MAC address is associated with a particular port when the connected device makes its first ...
0
votes
1answer
25 views

Sending Frames Among Routers needs MACs?

Following this discussion: ARP request outside of LAN; Target machine or router response? I'd like to understand if router 1 sends its frames to router 2 through the same ARP process as discussed ...
2
votes
1answer
425 views

Is there a way to capture only gratuitous ARP's using tcpdump?

I'm trying to set up tcpdump to filter only gratuitous ARP's. I know that I need to search for packets with a host set to ff:ff:ff:ff:ff:ff. And I found the arp.opcode parameter, but I can't seem to ...
2
votes
0answers
90 views

Swapping routers resulting in ARP issues?

A day ago I tried to swap out a router with a Meraki MX-84 Gateway in order to test the Meraki's VPN functionality. I set the static IP configuration on the MX-84's Internet interface to be the same ...
3
votes
1answer
34 views

Why the ARP packet contains values like “Physical Address length” etc?

From what i know,MAC addresses are made of 48 bits,while IPv4 addresses are 32 bits Why are there these header fields? Are there MAC addresses with more or less 48 bits?
2
votes
2answers
256 views

No route to host for IPs in same subnet being routed by bgp

I have set up BGP to do some custom routing for a subset of addresses in the range 192.168.1.0/24. I have verified that the BGP is working by testing ping/curl on a different host in a different ...
2
votes
1answer
189 views

Virtual IP failover issue with vmware exsi ip based hashing

We are deploying HA database cluster on exsi which based on virtual IP concept for failover. if One node fail reserved VIP will be assigned to another node we have two exsi nodes and two virtual ...
0
votes
1answer
184 views

How can a Juniper Router update its arp table?

I know the ARP table is cached data. On Juniper, we can use show arp to query the arp table: admin@juniper> show arp | match "16.23.43.75" ac:1f:6b:90:d1:ca 16.23....
0
votes
1answer
83 views

On a 3560E Switch

** Attempting to view IP address of a Non-Cisco device connected to the switchport. Already entered show mac address-table int gi0/35. Got the mac, then tried the sho ip arp vlan 120 | include ...
0
votes
1answer
38 views

Whether the ARP table is based on IP or Interface?

Is the arp table based on IP or based on network interface? I have a VM, it has an Interface with 10.211.55.7, when I show the arp, it shows: I want to know if the ARP table data is divided by IP or ...
0
votes
1answer
258 views

Arp Cache Timeout [closed]

I'm trying to poll the arp table from a backbone switch but i want to understand which records are up. I just want to know if there is a specific time for the switch to keep a record on the arp table ...
0
votes
0answers
65 views

Wireshark switch ping

I understand that a switch will broadcast to all ports if it doesn't have the destined destination in its mac address table but when I analysed a scenario in wireshark I got confused at what happened. ...
0
votes
1answer
39 views

How does a system know the local gateways MAC address for given IP address [duplicate]

Assuming you have the following network structure. Knowing the IP address of the WWW-Server, system A wants to send an IP packet. As I understand the destination MAC address has to be in the same ...
1
vote
1answer
54 views

switch wireshark arp

I connected 4 pcs to a switch, I used pc 1 to ping another pc(pc 3) and used wireshark on all the pc's. The one that sent the ping sent out an arp request and received 4 request and replies from the ...
2
votes
2answers
124 views

Please help me understand this simple arp request / reply - how does a router know an IP address without knowing the MAC address?

I am new to networking, I am using Wireshark on my home PC to learn about ARP. I understand that ARP is used to build the ARP cache, which correlates IP addresses to MAC addresses on a LAN. ARP ...
7
votes
4answers
2k views

Does every host on the LAN share the same ARP table, or do hosts keep them individually?

I'm just learning about ARP. I'm a little bit confused. My confusion is better explained in a scenario. Host A is communicating with Host B. Host A knows Host B's IP address, but not it's MAC address....
3
votes
1answer
500 views

MAC Table vs ARP

I understand that for a switch to learn a MAC address, if host A wanted to send data to Host B the switch learns host A MAC and places it in the MAC table. If it doesn't know where the MAC (for Host B)...
2
votes
2answers
73 views

How does a computer know IP address of a computer on another network

I was watching a video explaining ARP, which was explained really easily but I got confused when they said that Host A already knows Host D ip address which is on another network. Host A and B were ...
0
votes
0answers
21 views

ARP and OSI model layers [duplicate]

Is ARP Layer 3 or Layer 2 protocol? It is used to figure out destination MAC, which is a second layer address, however, it has the info about destination IP address, which is a third layer address, ...
2
votes
2answers
160 views

How does a router know the destination mac?

so if I send a packet from a host to another from the same network we know the mac address of both the source and destination. However if the receiver is in a remote network the destination mac ...
0
votes
2answers
63 views

What is the bridging decision when getting ARP request?

Setup: Assume I have 3 VMs. VM1 VM2 and VM3. VM2 has two interfaces, say eth1 and eth3. eth1 is connected to VM1 physically and eth3 to VM3. I create a bridge on VM2 using brctl with eth1 and eth3. ...
0
votes
2answers
89 views

Why we need ARP when each device has its own IP address?

I don't really understand Address Resolution Protocol (ARP). Why we need ARP when each device has its own IP address?
1
vote
3answers
323 views

If ARP uses broadcast, can I find out MAC-Address AND IP with it?

I have a peripheral device, connected via Ethernet to my Ubuntu. I would like to find out its IP, and untofetunately no it is not cached in my ARP table. ARP broadcasts the messages to every ...
1
vote
1answer
219 views

How does ARP work on multilayer (Cisco) switches

I'm going to develop an example scenario here: There is a computer that is connected to an interface on the switch that has been assigned VLAN2 and another computer on an interface that has been ...
3
votes
1answer
295 views

Cisco ARP cache rewrites?

I know that the Cisco's default ARP entry expiration is 240 minutes, however how does the ARP table mechanism work when a different MAC address is seen using the same IP? In other words, if I move ...
3
votes
1answer
119 views

To what address does ARP reply in the presence of MAC masquerading

The ARP packet has a duplicate of the sender/destination hardware address. Theoretically, you could have a case where a device sent Layer2: From AA:BB:CC:DD:EE:FF To FF:FF:FF:FF:FF:FF Layer3: ARP ...