First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

What causes continuous arp requests with same IP?

Is there a reason why a device would send an arp storm (15-20/sec) of arp requests for it's own IP? I'm reluctant to call it a 'storm' but it seems excessive. Is it merely trying to see if there is a duplicate IP of itself on the network? The MAC address is a Wibhu Tech device which I believe is some kind of WiFi access point. thx

10:51:31.014032 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.195 (Broadcast) tell 192.168.1.195, length 46
10:51:31.090023 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.195 (Broadcast) tell 192.168.1.195, length 46
thebeezle's avatar
1
thebeezle
asked 2018-03-09 16:03:03 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

Seems, that device is sending out continously an Gratious ARP Request. Either you got a loop on your network or maybe someone is spoofing this IP Address.

But in fact this is not a normal behaviour and if I where you I would investigate this behaviour.

Christian_R's avatar
2.1k
Christian_R
answered 2018-03-10 22:24:41 +0000
edit flag offensive 0 remove flag delete link

Comments

I encountered similar issues. Could you advise how to investigate this behavior?

YHC's avatar YHC (2021-02-28 04:18:16 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer