• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 5590
  • Last Modified:

Received Address Errors using Netstat and ARP question

I am trying to find out why my machine seems to be running slow on my network.

When I do netstat-s I get a high count for  "Received Address Errrors"

When I take a Sniff I notice the same machines periodicly ARPing for addresses they have already ARPed for in the same minute

1.How can I find out what is causing this count to be so high

2. Why are these  ARP's being sent continually when the machines involved have communicated in the last minute.

Thanks
0
halcyone
Asked:
halcyone
  • 3
  • 3
1 Solution
 
Kimura_KalidorCommented:
There are a couple of things I would look for.

First, unless you are running a farily sophisticated network, I'd turn of the QoS feature in Windows (assuming you are talking about XP machines). MS had a whitepaper out at one point on how badly it can degrade network performance.  I actually have seen this first hand. QoS on meant no internet, QoS of meant perfect internet. Didn't need much convincing.

Check for worms. With some worms the first sign of trouble is increased and unusual ARP requests.

Beyond that .. your timeout should be on the order of about 10 minutes.
0
 
crissandCommented:
You could have duplicate ip addresses in the network, or a damaged media (connection cables, patches), or an incorrect mtu.

What type of other information netstat -s is providing? Look at "Reassembly Failures".

Try netdiag from Windows Support tools
0
 
halcyoneAuthor Commented:
What exaclty are "address errorrs"

How long should an XP machine keep an ARP entry in its memory for?

Thanks
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
crissandCommented:
Packets received by this computer with bad address header. Sometimes this can be related to spoofed addresses, or non routable addresses. The STP can also generate these errors.

I don't know exactly, but I think the arp cache is flushed by resetting the computer.
0
 
halcyoneAuthor Commented:
Thanks

Does netdiag work on XP ?

When you say STP do you mean spanning tree?

Thanks
0
 
crissandCommented:
Yes, netdiag work on XP. The utilility as part op the Support Tools.

Spanning Tree Protocol.
0
 
halcyoneAuthor Commented:
Thanks Accepted
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now