[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 579
  • Last Modified:

the command ARP ?

hello ,,
whats this command mean and and what the output mean ?


C:\>arp /a

Interface: 147.159.123.159 on Interface 0x1000003
  Internet Address      Physical Address      Type
  147.159.123.1         00-03-99-88-96-8b     dynamic
  147.159.123.248       00-01-2e-05-90-0c     dynamic

147.159.123.159 is my ip , my server ip is 147.159.123.1 , 147.159.123.248 is another computer ! ..
thank you v much

0
3ezz
Asked:
3ezz
5 Solutions
 
PsiCopCommented:
The ARP command shows you the entries in the TCP/IP Address Resolution Protocol table. ARP provides translation of IP addresses into local-subnet MAC addresses. What you are seeing is all the MAC addresses of the IP addresses on the local subnet.
0
 
3ezzAuthor Commented:
but there are 4 PC's in the same subnet too ... where they are ?
0
 
dis1931Commented:
These are most likely the ones that you have used recently...aka in the last 2 minutes.  I believe the ARP table keeps entries for two minutes and then they are cleared assuming that you are not accessing anything on these devices constantly.  So say you access a share on 147.159.123.1 and then close the window and don't communicate with it for 2 minutes or so it will be wiped from arp cache.  I believe pinging devices causes it to enter arp cache.  So if you ping another pc on the subnet it will appear in the list.  It doesn't necessarily go out and attempt to find all devices on the network it is simply a cache of MAC addresses that the computer has had to resolve on the local subnet.....

This is all from memory so might be a little off....i was trying to find a site that had a good explanation but couldn't find one....if i do i will post it.

Dis
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
cyrnelCommented:
It can be configured since NT4 sp3 but otherwise 2 minutes is right for the initial value. If used the timer resets to 10 minutes. Controllable by:

HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\ArpCacheLife and ArpCacheMinReferencedLife
0
 
dis1931Commented:
Thanks cyrnel..i knew i wasn't going crazy about the 2 minute thing.

Dis
0
 
cyrnelCommented:
Yep, not a limit you have to fight too often.

The control keys don't exist by default so changing defaults means adding the pairs & restarting.

Also, I recall old experiments where the win stack cache expands automatically once you get past the initial table of 50 entries. But it doesn't shrink gracefully, or didn't in old stacks. Setting the default timers too high would worsen the small mess in memory on wires with lots of interfaces.
0
 
iwontleaveyouCommented:
the command arp /a  or arp -a are the same commands and this command shows the current arp table entries. I have answered to this question and want you to refer it.

http://www.experts-exchange.com/Networking/Q_21125477.html#12023921

there is a link in the accepted answer view that link also.
0

Featured Post

NFR key for Veeam Agent for Linux

Veeam is happy to provide a free NFR license for one year.  It allows for the non‑production use and valid for five workstations and two servers. Veeam Agent for Linux is a simple backup tool for your Linux installations, both on‑premises and in the public cloud.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now