LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 10-14-2009, 04:24 PM   #1
mohtasham1983
Member
 
Registered: Apr 2005
Location: San Jose
Distribution: Fedora 3,4- Ubuntu 6.06 to 8.10, Gentoo and Arch
Posts: 408

Rep: Reputation: 30
Can arp requests cause latency issues?


Hi,

Recently, I started using comcast as my internet provider. I haven't bought a router, yet. I am connecting my laptop to their modem through cable. The bandwidth is pretty good, but I'm having issues with long latency.

The other day I noticed that there's a lot of network activity on my computer, even though I wasn't using any internet based application. After capturing packets using wireshark, I saw a lot of arp requests from different computer entering my computer.

I was wondering if anyone knows whether or not my long latency issue is related to receiving broadcasted arp requests?

Thanks in advance.
 
Old 10-14-2009, 05:03 PM   #2
cyent
Member
 
Registered: Aug 2001
Location: ChristChurch New Zealand
Distribution: Ubuntu
Posts: 250

Rep: Reputation: 43
Quote:
Originally Posted by mohtasham1983 View Post
Hi,

The other day I noticed that there's a lot of network activity on my computer, even though I wasn't using any internet based application. After capturing packets using wireshark, I saw a lot of arp requests from different computer entering my computer.

I was wondering if anyone knows whether or not my long latency issue is related to receiving broadcasted arp requests?

Probably not. To confirm post some of the wireshark traces please.

More likely to cause delays are DNS lookups.
 
Old 10-14-2009, 07:31 PM   #3
mohtasham1983
Member
 
Registered: Apr 2005
Location: San Jose
Distribution: Fedora 3,4- Ubuntu 6.06 to 8.10, Gentoo and Arch
Posts: 408

Original Poster
Rep: Reputation: 30
Here is some of wireshark traces"

Code:
"No.","Time","Source","Destination","Protocol","Info"
"1","0.000000","Cadant_24:32:c1","Broadcast","ARP","Who has 98.234.86.111?  Tell 98.234.84.1"
"2","0.008730","Cadant_24:32:c1","Broadcast","ARP","Who has 69.181.20.0?  Tell 69.181.16.1"
"3","0.055640","Cadant_24:32:c1","Broadcast","ARP","Who has 69.181.23.30?  Tell 69.181.16.1"
"4","0.122119","Cadant_24:32:c1","Broadcast","ARP","Who has 73.68.172.68?  Tell 73.68.172.1"
"5","0.192828","Cadant_24:32:c1","Broadcast","ARP","Who has 98.207.96.68?  Tell 98.207.96.1"
"6","0.230476","Cadant_24:32:c1","Broadcast","ARP","Who has 69.181.16.74?  Tell 69.181.16.1"
"7","0.264535","Cadant_24:32:c1","Broadcast","ARP","Who has 69.181.22.33?  Tell 69.181.16.1"
"8","0.414039","Cadant_24:32:c1","Broadcast","ARP","Who has 98.234.84.89?  Tell 98.234.84.1"
"9","0.427494","Cadant_24:32:c1","Broadcast","ARP","Who has 98.207.97.90?  Tell 98.207.96.1"
"10","0.440745","Cadant_24:32:c1","Broadcast","ARP","Who has 73.68.172.69?  Tell 73.68.172.1"
"11","0.478161","Cadant_24:32:c1","Broadcast","ARP","Who has 98.234.86.92?  Tell 98.234.84.1"
"12","0.547772","Cadant_24:32:c1","Broadcast","ARP","Who has 69.181.20.208?  Tell 69.181.16.1"
"13","0.615181","Cadant_24:32:c1","Broadcast","ARP","Who has 98.234.86.99?  Tell 98.234.84.1"
"14","0.651815","Cadant_24:32:c1","Broadcast","ARP","Who has 73.68.172.59?  Tell 73.68.172.1"
"15","0.652028","Cadant_24:32:c1","Broadcast","ARP","Who has 73.68.172.58?  Tell 73.68.172.1"
"16","0.695372","Cadant_24:32:c1","Broadcast","ARP","Who has 73.68.172.60?  Tell 73.68.172.1"
"17","0.782318","Cadant_24:32:c1","Broadcast","ARP","Who has 98.207.97.213?  Tell 98.207.96.1"
"18","0.940533","Cadant_24:32:c1","Broadcast","ARP","Who has 73.68.172.70?  Tell 73.68.172.1"
"19","1.025575","Cadant_24:32:c1","Broadcast","ARP","Who has 69.181.20.151?  Tell 69.181.16.1"
"20","1.035555","Cadant_24:32:c1","Broadcast","ARP","Who has 73.68.172.71?  Tell 73.68.172.1"
Note that when you go on detail, source IP address is different in every packet. Its IP address is similar to the one that's asking to be told to.

Yes, there's a huge delay on DNS lookups. When I go to gmail.com, it takes forever to look up gmail, and then it takes another time to find mail.google.com to redirect me to it.

Edit: I think it's normal for a computer to receive so many ARP requests if it's directly connected to the cable modem. I also think getting a router will decrease the DNS lookup time, as most likely it will contain a DNS server. I'm not sure about this one till I test it.

Last edited by mohtasham1983; 10-14-2009 at 07:57 PM.
 
Old 10-14-2009, 08:18 PM   #4
cyent
Member
 
Registered: Aug 2001
Location: ChristChurch New Zealand
Distribution: Ubuntu
Posts: 250

Rep: Reputation: 43
adblock plus is your friend.

Quote:
Originally Posted by mohtasham1983 View Post
Here is some of wireshark traces"

Note that when you go on detail, source IP address is different in every packet. Its IP address is similar to the one that's asking to be told to.
I suspect something upstream of you is misconfigured... but that isn't your problem. It's just eating a small bit of your bandwidth.

Quote:
Yes, there's a huge delay on DNS lookups. When I go to gmail.com, it takes forever to look up gmail, and then it takes another time to find mail.google.com to redirect me to it.
Yip, that'll be your problem then. Especially if you are using firefox, (the DNS lookup is in the same thread as the UI, causing the UI to lockup in a bloody frustrating manner until the DNS lookup completes.)

Quote:
I also think getting a router will decrease the DNS lookup time, as most likely it will contain a DNS server. I'm not sure about this one till I test it.
I doubt if that will help.

What I find does help is the firefox addon adblock plus.

I find that 90% of the slow DNS lookups are ad servers. Soon as I see firefox freezing up I open up adblocks blocking list and block likely looking ad urls. Bang. Problem goes away forever.
 
  


Reply

Tags
arp, comcast, latency, request


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Strange ARP behavior : A linux server responds to all ARP requests Hdvd21 Linux - Networking 4 10-24-2013 05:02 AM
How to create loop for arp requests jasonfrost Programming 1 09-11-2007 02:39 PM
a lot of ARP requests- why? zivota Linux - Networking 5 09-26-2005 08:06 AM
Network Flooded With ARP requests aronnok Linux - Security 3 12-25-2004 04:54 PM
How to monitor the ARP requests from other than eth1 Bassam Linux - Networking 4 02-10-2004 03:25 AM


All times are GMT -5. The time now is 10:05 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration