Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game. |
Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
|
 |
09-23-2005, 05:45 PM
|
#1
|
Member
Registered: May 2005
Distribution: CENTOS
Posts: 91
Rep:
|
a lot of ARP requests- why?
Hi there,
I am playing with tcpdump (learning) and noticed huge ammount of ARP trafic on my external interface but actualy non of hem originated or destined for my IP.
I am wondering why?
I am on cable connection. Am I on some kind of hub so that I can actually listen traffic around me or....??
Just to stress that my IP is not even on same subnet with any of these guys.
example
------------
15:36:13.351630 arp who-has 24.86.201.37 tell 24.86.200.1
15:36:13.351863 arp who-has 24.86.201.37 tell 24.86.200.1
15:36:13.369831 arp who-has 24.85.76.160 tell 24.85.76.1
15:36:13.370058 arp who-has 24.85.76.160 tell 24.85.76.1
15:36:13.374676 arp who-has 24.86.203.3 tell 24.86.200.1
15:36:13.374903 arp who-has 24.86.203.3 tell 24.86.200.1
15:36:13.382823 arp who-has 24.85.86.60 tell 24.85.84.1
15:36:13.383052 arp who-has 24.85.86.60 tell 24.85.84.1
15:36:13.395406 arp who-has 24.86.194.62 tell 24.86.192.1
15:36:13.395631 arp who-has 24.86.194.62 tell 24.86.192.1
15:36:13.476531 arp who-has 24.86.203.212 tell 24.86.200.1
15:36:13.476766 arp who-has 24.86.203.212 tell 24.86.200.1
15:36:13.492559 arp who-has 24.85.88.11 tell 24.85.88.1
15:36:13.492784 arp who-has 24.85.88.11 tell 24.85.88.1
Thanks!
|
|
|
09-24-2005, 03:32 PM
|
#2
|
Member
Registered: Jun 2005
Location: q3dm7
Distribution: Mandriva 2010.0 x86_64
Posts: 338
Rep:
|
It looks like you're picking up ARP broadcast traffic from a number of Shaw gateways. I'd ask Shaw about that if I were you - it seems unusual.
|
|
|
09-24-2005, 03:35 PM
|
#3
|
Moderator
Registered: Feb 2002
Location: Grenoble
Distribution: Debian
Posts: 9,696
|
There may be a hub. There also may be incorrectly configured clients, cable modems etc. You probably need to live with it. What's more, you'll see things much more strange than this...
|
|
|
09-25-2005, 12:29 AM
|
#4
|
Member
Registered: Jun 2005
Posts: 542
Rep:
|
I'm not using a cable connection, but I could try shutting down those requests with false replies to one of your ISP's servers so they notice it 
|
|
|
09-25-2005, 03:42 PM
|
#5
|
Member
Registered: May 2005
Distribution: CENTOS
Posts: 91
Original Poster
Rep:
|
I'll try to contact my ISP...problem is on their side obviously.
Thanks for replies, guys!
|
|
|
09-26-2005, 08:06 AM
|
#6
|
Member
Registered: Sep 2004
Distribution: Debian, Ubuntu, BeatrIX, OpenWRT
Posts: 273
Rep:
|
They may very well tell you that this is normal behaviour. These are arp-requests, which are broadcasts. Hence, everyone on the same ethernet-subnet will receive them. One ethernet-subnet may very well host multiple ip-subnets.
If this is normal behaviour, and you are generating false replies, you may very well find out that your account will get blocked.
Groetjes,
Kees-Jan
|
|
|
All times are GMT -5. The time now is 04:25 AM.
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|