Solved

arp who-has on multiple subnet

Posted on 2010-11-26
2
735 Views
Last Modified: 2012-05-10

Hi,

I have some questions about the protocol ARP. One of my device send a "who has" arp packet to a other device. But the second device are in other subnet.

If I understand well a "who has" query is a broadcast, so it is normal that the second device don't reply the "who has" query since is not in the same subnet. is it? But why the first device send "who has" query?

Maybe I just don't understand how is working.

Here are the packet:

2.835165 wlan in arp who-has 192.168.10.40 tell 192.168.6.2
0x0000       ffff ffff ffff 0002 2d66 1bd2 0806 0001      ........-f......
0x0010       0800 0604 0001 0002 2d66 1bd2 c0a8 0602      ........-f......
0x0020       0000 0000 0000 c0a8 0a28                                          .........(

and no more reply after that.



0
Comment
Question by:Vbourbeau
2 Comments
 
LVL 3

Accepted Solution

by:
guitar7man earned 250 total points
Comment Utility
If a node needs to get to a device on a different subnet, it's not going to send out an ARP for its MAC address, it's going to ARP for its gateway (if needed) because it knows the intended destination is not on the layer 2 network. Do you have your subnet mask correct on the host?
0
 

Author Comment

by:Vbourbeau
Comment Utility

This is what I think. For the subnet mask I'm pretty sure is set correctly but I can't check for now.

My doubts are on the device himself maybe an frimware update will help.

Thank you
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
As companies replace their old PBX phone systems with Unified IP Communications, many are finding out that legacy applications such as fax do not work well with VoIP. Fortunately, Cloud Faxing provides a cost-effective alternative that works over an…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now