This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

after disable the tcp offload network arp request coming

0

after disable the tcp offload on three server only, and run wireshark on my server arp request is coming, before disable tcp offload my network was normal. kindly help , is it issue or normal thing

0   0   Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    1
21.278276   21.278276   Dell_e8:99:59   Broadcast   ARP 60  FALSE   Who has 192.168.2.100?  Tell 192.168.2.117  2
0.000901    21.279177   D-Link_be:dd:c3 Broadcast   ARP 60  FALSE   Who has 192.168.2.117?  Tell 192.168.2.100  3
9.481865    30.761042   Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    4
15.343019   46.104061   Dell_e6:c4:ac   Broadcast   ARP 60  FALSE   Who has 192.168.2.100?  Tell 192.168.2.116  5
0.000908    46.104969   D-Link_be:dd:c3 Broadcast   ARP 60  FALSE   Who has 192.168.2.116?  Tell 192.168.2.100  6
15.374804   61.479773   Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    7
30.759868   92.239641   Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    8
30.759856   122.999497  Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    9
30.761067   153.760564  Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    10
29.08981    182.850374  Dell_e6:c2:a7   Broadcast   ARP 60  FALSE   Who has 192.168.2.100?  Tell 192.168.2.125  11
0.000878    182.851252  D-Link_be:dd:c3 Broadcast   ARP 60  FALSE   Who has 192.168.2.125?  Tell 192.168.2.100  12
1.628007    184.479259  Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    13
1.504338    185.983597  Dell_e8:94:4b   Broadcast   ARP 60  FALSE   Who has 192.168.2.100?  Tell 192.168.2.126  14
0.000918    185.984515  D-Link_be:dd:c3 Broadcast   ARP 60  FALSE   Who has 192.168.2.126?  Tell 192.168.2.100  15
15.894551   201.879066  Dell_e8:9e:86   Broadcast   ARP 42  FALSE   Who has 192.168.2.100?  Tell 192.168.2.3    16
0.000274    201.87934   D-Link_be:dd:c3 Dell_e8:9e:86   ARP 60  FALSE   192.168.2.100 is at 5c:d9:98:be:dd:c3   17
0.000673    201.880019  D-Link_be:dd:c3 Broadcast   ARP 60  FALSE   Who has 192.168.2.3?  Tell 192.168.2.100    19
0.000003    201.880022  Dell_e8:9e:86   D-Link_be:dd:c3 ARP 42  FALSE   192.168.2.3 is at 14:fe:b5:e8:9e:86 20
13.224288   215.239135  Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    46
30.759934   245.999069  Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    47
3.992188    255.985896  Dell_e6:c4:ac   Broadcast   ARP 60  FALSE   Who has 192.168.2.100?  Tell 192.168.2.116  49
0.000917    255.986813  D-Link_be:dd:c3 Broadcast   ARP 60  FALSE   Who has 192.168.2.116?  Tell 192.168.2.100  50
0.000231    269.99975   Dell_e8:b0:a5   Broadcast   ARP 60  FALSE   Who has 192.168.2.100?  Tell 192.168.2.2    61
0.000876    270.000626  D-Link_be:dd:c3 Broadcast   ARP 60  FALSE   Who has 192.168.2.2?  Tell 192.168.2.100    62
2.696277    276.760045  Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    67
1.298432    307.478784  Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    84
1.150452    338.238632  Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    103
1.904422    357.00038   D-LinkIn_1f:ec:2a   Broadcast   ARP 60  FALSE   Who has 192.168.2.100?  Tell 192.168.2.1    114
0.000845    357.001225  D-Link_be:dd:c3 Broadcast   ARP 60  FALSE   Who has 192.168.2.1?  Tell 192.168.2.100    115
2.15736 368.99849   Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    122
1.623439    399.759534  Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    141
0.63662 430.4783    Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    159
0.085976    461.238138  Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    178

asked 17 Dec '11, 02:35

drawat's gravatar image

drawat
1222
accept rate: 0%

edited 17 Dec '11, 02:42

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245


One Answer:

0

What is considered normal all depends on the way your network has been set up. The ARP's look OK to me, apart from the ones from 192.168.0.120. Is this a /24 subnet, then it is on the wrong subnet. If it is a /22 or greater, then it's fine.

However, ARP requests are totally independent on whether you do TCP offloading (checksum, segmentation or even chimney), so I don't really get our question.

answered 17 Dec '11, 02:50

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%