This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

From what I understand if things are configured correctly I shouldn't see an ARP to a Target IP on a different subnet.

Since it should know the MAC address it should use is the default GW.

Something may be misconfigured, but I'm not seeing it yet.

I'll attach the network trace.

But my question is whether I should be seeing an ARP for an IP on another subnet?

asked 31 Jul '15, 14:23

gipper's gravatar image

gipper
30121216
accept rate: 0%

I uploaded trace.

See frame 27.

https://www.cloudshark.org/captures/d8c1f95f6e29

(31 Jul '15, 14:30) gipper

The most probably reason for such behaviour is a misconfigured Subnetmask at the sender. In this case: 52.97.224.112.

permanent link

answered 31 Jul '15, 16:44

Christian_R's gravatar image

Christian_R
1.8k2625
accept rate: 16%

agree, subnet mask is wrong on the node sending the ARP. It thinks it can reach the destination directly without the default gateway. Easily fixed by correcting the subnet mask setting of that node.

(01 Aug '15, 10:05) Jasper ♦♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×78
×8

question asked: 31 Jul '15, 14:23

question was seen: 1,101 times

last updated: 01 Aug '15, 10:05

p​o​w​e​r​e​d by O​S​Q​A