Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Register Log in
  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

ARP Broadcasts

Status
Not open for further replies.
OnoSendai

OnoSendai

Technical User
Jun 18, 2004
3
GB
Why would a switch continually send out ARP broadcasts?

I've seen this a couple of times and dont really understand why.

Seems the switch will braodcast a whole range of addresses then repeat the prosess seconds later.

I keep seeing traces with like 30 to 40% ARPs
 
Sort by date Sort by votes
is it a Cisco Lightstream 1010? If you have host-routing enabled on that product, the Ethernet interface will broadcast excessive ARPs (no known work-around)

Owen O'Neill
Datacom Systems Inc.
Northeastern SE
 
Upvote 0 Downvote
Is the source of the ARP broadcasts the switch itself or are you just seeing the broadcasts out a switch port? Look at the source MAC address of the broadcasts.

A switch will normally flood ARP broadcasts to every port since he doesn't know which port will answer.

If the source MAC address is another system, then it may be infected with a worm/virus that is looking for another host to infect.

HTH,
Patrick

Patrick Bartkus, CCNP, CNX, SCM, RHCT Sr. Network Engineer
GA Dept of Labor IT Network Services
If truth were not absolute, how could there be justice?
 
Upvote 0 Downvote
Status
Not open for further replies.

Similar threads

rn4it
  • Locked
  • Question
arp capture question
Replies
0
Views
53
rn4it
rn4it
jdavis1
  • Locked
  • Question
Unicast ARP requests
Replies
3
Views
50
jdavis1
jdavis1
sventekkrishti
  • Locked
  • Question
ARP
Replies
2
Views
37
sventekkrishti
sventekkrishti
jkeeper
  • Locked
  • Question
Tracking Broadcasts
Replies
1
Views
44
fortunat
fortunat

Part and Inventory Search

Sponsor

Back
Top