ARP Broadcast Storm

I just downloaded Ethereal and scaned my network.

There are alot of arp broadcasts from all clients and servers.
Some are by host name, some are IP address's

EX:
10.x.x.x broadcast arp who has 10.x.x.x? tell 10.x.x.x

NT4.0 PDC server running Wins, DHCP, DNS
Win2K Member running Exchange5.5
Win2k3 member running SUS
XP Pro Clients

I have 10 3com Switchs SS II 3300
10.x.x.x Spanning-tree - (for-bridges)_00   STP
(this is coming off my core switch only)


I also noticed some dns requests the same way as the arp's

I also noticed IPX RIP Request's
00000000.000048b37e0e  00000000.ffffffffffff  IPX RIP Request

Is all this normal?

CMILLERAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

CMILLERAuthor Commented:
I also noticed IPX RIP Request's
00000000.000048b37e0e  00000000.ffffffffffff  IPX RIP Request

this was my Epson Plotter 000048b37e0e was the mac
0
JFrederick29Commented:
Yes, ARP and RIP requests are normal on an IP/IPX network.  Everytime a system needs to communicate with another system on the same subnet, it must send an ARP request to discover the target system's MAC address (unless the system has previously communicated with the system, the entry resides in the local systems ARP cache, as long as it hasn't aged out).  ARP is a necessary component for IP communication so as long as the traffic is not excessive, it is normal.

How many systems do you have on the local LAN?  
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
CMILLERAuthor Commented:
about 75
0
Introducing Cloud Class® training courses

Tech changes fast. You can learn faster. That’s why we’re bringing professional training courses to Experts Exchange. With a subscription, you can access all the Cloud Class® courses to expand your education, prep for certifications, and get top-notch instructions.

JFrederick29Commented:
You should see a good amount of ARP traffic then, you would know if you had an ARP broadcast storm (hundreds and hundreds of ARPS, constantly).  Like I said, it is normal to see ARP traffic on your network.
0
CMILLERAuthor Commented:
Do you see anything from this network setup that would make it a more efficient network
( as far as traffic )

Thanks,
-Chris
0
CMILLERAuthor Commented:
The plotter had a static IP and Netware IPX enabled

I disabled the Netware
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Networking

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.