Re: Why so much ARP traffic?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Phillip Windell wrote:
"Jeanette" <jrusso2@xxxxxxxxxxx> wrote in message news:OUXlfMpLHHA.3268@xxxxxxxxxxxxxxxxxxxxxxx
Seems to be continuous. Each address being asked to respond and there are hundreds of possible addresses.

So this is normal and I should not worry about all this traffic?
I wouldn't.
If you're looking for a BoogyMan, this isn't it.

There is no virus. I have checked for that. Both are new clean installs.

Is there anyway to set the arp requests so they don't check every pc possible address on the subnet?

Since Ethernet functions by broadcasts,..and broadcasts are received by every machine,...and also sent by everymachine at some point,...sooner or later every machine has to have a valid ARP entry for every machine on the LAN at some point in time,...so why do you want to "break" that?

In all honesty, just put away the network sniffer and forget about it. Use the sniffer when you actually have a specific, verifiable, problem to solve,...using it to just stare at to see what is there usually only causes people to see black helicopters and flying saucers and think there is a hacker under every rock.

Ok I was having a problem thats why I was doing the sniffing in the first place sometimes

I was seeing some devices losing connection and having to come back online. And the only
thing out of the ordinary was the huge amount of arp broadcasts.

Thats why I was asking.

Jeanette



But it seems to not be d

.

Relevant Pages

  • RE: ARP broadcasts
    ... Subject: ARP broadcasts ... cable modem network. ... > anything more sinister that ARP packets can do? ...
    (Focus-IDS)
  • Re: How to check ARP cheat in Lan.
    ... > with ARP cheating. ... network sniffer. ... I suspect Ettercap to be using ARP spoofing itself. ...
    (Debian-User)
  • Re: How to check ARP cheat in Lan.
    ... >> work with ARP cheating. ... > network sniffer. ... I suspect Ettercap to be using ARP spoofing itself. ... > I guess that you would be able to set up another sniffer in your network, ...
    (Debian-User)
  • Re: ARP broadcasts
    ... Subject: ARP broadcasts ... > addresses and a lot of those are cable modem addresses. ... > flood of arps that codered scans are generating. ...
    (Focus-IDS)
  • RE: ARP broadcasts
    ... > To: Focus IDS ... > Subject: ARP broadcasts ... > anything more sinister that ARP packets can do? ...
    (Focus-IDS)