This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I am fairly new at this so any extra information that may help me learn is appreciated.

My laptop (which Wireshark is running on) seems to be sending a lot of ARP requests. It seems to be starting at 10.0.0.1 and runs all the way through to 10.0.0.255, asking about each ip multiple times. After it finishes it will stop for something like 15 seconds before starting over again. Statistics from the sample captured show 88 ARP packets in ten seconds.

I was also curious about the SNMP requests. Principally I can't think of anything that would be using that destination address, and I never see any response traffic.

\

alt text

Again, any information at all would be helpful. Thank you much.

asked 20 Nov '12, 16:13

kineteks's gravatar image

kineteks
1112
accept rate: 0%


This OID tells me you've got a crappy printer manager running, causing all this traffic.

permanent link

answered 20 Nov '12, 23:26

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

Thank you! Ended up removing all printers from Printers and Devices. No more SNMP traffic, and I learned a bit about OID's. Now if even has any ideas about the ARP traffic...

(21 Nov '12, 21:26) kineteks

Printer usually come with a CD with crappy printer manager software. If you installed it, it may still be scanning your network to find printers.

(22 Nov '12, 04:23) Jaap ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×78
×43
×21
×9

question asked: 20 Nov '12, 16:13

question was seen: 5,486 times

last updated: 22 Nov '12, 04:23

p​o​w​e​r​e​d by O​S​Q​A