Hello,
I'm behind a cable modem, and I'm seeing stupid amounts of arp who-has requests on the external interface. There are thousands of requests per minute, frequently recurring for the same IP-addresses, and sometimes for whole blocks at a time:
Code:
02:55:23.611075 arp who-has 80.56.188.89 tell 80.56.188.1
02:55:23.811294 arp who-has 80.56.21.211 tell 80.56.21.1
02:55:23.930024 arp who-has 62.163.84.128 tell 62.163.84.1
02:55:24.034314 arp who-has 62.163.84.201 tell 62.163.84.1
02:55:24.119574 arp who-has 80.56.215.23 tell 80.56.215.1
02:55:24.130266 arp who-has 80.56.2.181 tell 80.56.2.1
02:55:24.286042 arp who-has 80.56.20.219 tell 80.56.20.1
02:55:24.358407 arp who-has 80.56.20.43 tell 80.56.20.1
02:55:24.618653 arp who-has 80.56.188.158 tell 80.56.188.1
02:55:24.664647 arp who-has 80.56.20.2 tell 80.56.20.1
02:55:24.664927 arp who-has 80.56.20.4 tell 80.56.20.1
02:55:24.664930 arp who-has 80.56.20.12 tell 80.56.20.1
02:55:24.665593 arp who-has 80.56.20.18 tell 80.56.20.1
02:55:24.665867 arp who-has 80.56.20.23 tell 80.56.20.1
02:55:24.666618 arp who-has 80.56.20.25 tell 80.56.20.1
02:55:24.667106 arp who-has 80.56.20.33 tell 80.56.20.1
02:55:24.670556 arp who-has 80.56.20.7 tell 80.56.20.1
02:55:24.670826 arp who-has 80.56.20.8 tell 80.56.20.1
02:55:24.670830 arp who-has 80.56.20.10 tell 80.56.20.1
02:55:24.671172 arp who-has 80.56.20.16 tell 80.56.20.1
02:55:24.671176 arp who-has 80.56.20.17 tell 80.56.20.1
02:55:24.671516 arp who-has 80.56.20.48 tell 80.56.20.1
02:55:24.672071 arp who-has 80.56.20.51 tell 80.56.20.1
I remember seeing *some* arp requests before but never this many.. is this normal? Why is it happening in the first place, what is the point?
