This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

home router repetitive ARP request

0

hi, I am wondering why my router (also DHCP server) keeps ARP requesting non-stop to my home PC

my rounter is D-Link N600: http://www.dlink.com/ca/en/home-solutions/connect/routers/dir-826l-cloud-gigabit-router-n600

here's a picture of the traffic: http://i.imgur.com/4zTiu6V.jpg

asked 17 Dec '13, 00:08

thisistherun's gravatar image

thisistherun
1●1●1●2
accept rate: 0%

One Answer:

2

why my router (also DHCP server) keeps ARP requesting non-stop to my home PC

well, a network analysis tool (Wireshark) can never answer why a system is behaving as observed. That question can only be answered by the developer of that device, by looking at the code.

I can imagine some reasons like

  • the DHCP server on the box tries to figure out if the MAC address is still in use (online), to decide if it can reuse the IP address.
  • the box tries to check if the MAC address is still in use (online) to show the device in the 'connected device/client list'
  • etc.

but that would be only speculation and would not help you to understand the real reason for the ARP requests.

So, to answer your question: Nobody here will be able to tell you for sure why the box sends ARP requests to your client, as nobody has access to the firmware code. So, it's better to ask these kind of questions in a D-Link forum or google for similar reports of other users.

Regards
Kurt

answered 17 Dec '13, 02:50

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k●10●39●237
accept rate: 15%

edited 17 Dec '13, 08:14

I contacted hardware vendor, but no response yet

ok, thanks Kurt

(17 Dec '13, 07:24) thisistherun
1

BTW: Are you sure your router is sending the ARP requests? In the 'Description' field of Netmon, it's said: 192.168.0.77 asks for 192.168.0.1. What IP address is configured on your router? The default IP is 192.168.0.1.

(17 Dec '13, 08:20) Kurt Knochner ♦

oh 192.168.0.77 is the client 192.168.0.1 is the router

i am taking another picture http://i.imgur.com/d5lDNnc.jpg 192.168.0.7 = client 192.168.0.1 = router

I am just setting up random static IP, even if it's a lease from DHCP server, it still does the ARP request consistently

(17 Dec '13, 13:18) thisistherun

Well, then see my explanation in the answer ;-)

(17 Dec '13, 13:49) Kurt Knochner ♦