Hello When I capture my own traffic on Wireshark for the protocol ARP , I only sees the ARP requests for the same network address and there are no replies seen. Could any anyone help with answer?
If you see ARP requests for other IP addresses on your subnet (so for IP addresses that are not the IP address of the host you're capturing on) and sent by other systems than the host you are capturing on, then it is correct that you only see the requests.
This is because the requests are send by broadcast (so every system in the subnet will see them), but the response is sent with an unicast to the system that sent the ARP request. On a switched network, the packet will only be sent to the port on which that system is connected.
Perfect. Thank you
If this answer answered your question, could you click on the check-mark next to it to mark this question as having been answered?
Comments
Not really sure what you mean. Do you seen ARP requests go out for your network interfaces IP address, or do you see them for another address on your network, or off your network? What capture engine do you use? Either WinPcap, Npcap or something else? On what platform, and does it have VPN and or firewalls installed? etc.
It is on the same network, I use WinPcap