This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hey, i ran a sniff with tcpdump on my jailbroken iPhone running ios 8.1.2 and while reading it i found this

alt text

What is this?

asked 10 Jan '15, 10:37

LGMan's gravatar image

LGMan
11446
accept rate: 100%


Yes it's ARP and is expected, see the RFC, or read any basic networking book. The host with IP 192.168.1.101 (some Apple manufactured device) is looking for the gateway at 192.168.1.1 which appears to be a DLink device.

The Apple and D-LinkIn parts appear because you have "Resolve MAC Addresses" enabled for the capture which allows the manufacturer specific part of the MAC address to be resolved to the name.

permanent link

answered 10 Jan '15, 14:18

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×10
×10
×3

question asked: 10 Jan '15, 10:37

question was seen: 1,457 times

last updated: 10 Jan '15, 14:18

p​o​w​e​r​e​d by O​S​Q​A