ARP Broadcast Storm
Posted on 2004-10-28
I just downloaded Ethereal and scaned my network.
There are alot of arp broadcasts from all clients and servers.
Some are by host name, some are IP address's
10.x.x.x broadcast arp who has 10.x.x.x? tell 10.x.x.x
NT4.0 PDC server running Wins, DHCP, DNS
Win2K Member running Exchange5.5
Win2k3 member running SUS
XP Pro Clients
I have 10 3com Switchs SS II 3300
10.x.x.x Spanning-tree - (for-bridges)_00 STP
(this is coming off my core switch only)
I also noticed some dns requests the same way as the arp's
I also noticed IPX RIP Request's
00000000.000048b37e0e 00000000.ffffffffffff IPX RIP Request
Is all this normal?