This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

60 Who has 192.168.1.2? Tell 192.168.X.XX Any idea what this means?

0

Hi,

First post here, when I try to use wireshark 1.12.3, it keeps showing this message, though I can use internet without any issue, just curious about what this actually means? And after restarting my system, it will show 60 192.168.X.X is as XX:XX:XX:XX:XX, I guess this is more like normal, right? Is there anything wrong? Any help would be appreciated.

BR, Kai

asked 05 Mar '15, 01:38

Kai's gravatar image

Kai
6112
accept rate: 0%


One Answer:

1

This is an ARP conversation, and is perfectly normal.

answered 05 Mar '15, 01:48

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

Thanks for quick reply.

What message I keep having is "60 Who has 192.168.1.2? Tell 192.168.X.XX", I won't get "60 192.168.X.X is as XX:XX:XX:XX:XX" until I restart my system, otherwise it just keeps coming out "60 Who has 192.168.1.2? Tell 192.168.X.XX"...Is it also normal that they need to keep communicating with "60 Who has 192.168.1.2? Tell 192.168.X.XX"? Again, thank you very much.

(05 Mar '15, 02:27) Kai

Standard ARP behaviour, the machine at 192.68.x.x is asking if anyone has IP 192.168.1.2 as either:

a. It wants to send a message to that IP and needs to know the MAC address. b. It's using gratuitous ARP for various other reasons.

(05 Mar '15, 04:18) grahamb ♦

If an answer has solved your issue, please accept the answer for the benefit of other users by clicking the checkmark icon next to the answer. Please read the FAQ for more information.

(05 Mar '15, 08:17) Jaap ♦