This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

after disable the tcp offload on three server only, and run wireshark on my server arp request is coming, before disable tcp offload my network was normal. kindly help , is it issue or normal thing

0   0   Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    1
21.278276   21.278276   Dell_e8:99:59   Broadcast   ARP 60  FALSE   Who has 192.168.2.100?  Tell 192.168.2.117  2
0.000901    21.279177   D-Link_be:dd:c3 Broadcast   ARP 60  FALSE   Who has 192.168.2.117?  Tell 192.168.2.100  3
9.481865    30.761042   Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    4
15.343019   46.104061   Dell_e6:c4:ac   Broadcast   ARP 60  FALSE   Who has 192.168.2.100?  Tell 192.168.2.116  5
0.000908    46.104969   D-Link_be:dd:c3 Broadcast   ARP 60  FALSE   Who has 192.168.2.116?  Tell 192.168.2.100  6
15.374804   61.479773   Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    7
30.759868   92.239641   Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    8
30.759856   122.999497  Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    9
30.761067   153.760564  Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    10
29.08981    182.850374  Dell_e6:c2:a7   Broadcast   ARP 60  FALSE   Who has 192.168.2.100?  Tell 192.168.2.125  11
0.000878    182.851252  D-Link_be:dd:c3 Broadcast   ARP 60  FALSE   Who has 192.168.2.125?  Tell 192.168.2.100  12
1.628007    184.479259  Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    13
1.504338    185.983597  Dell_e8:94:4b   Broadcast   ARP 60  FALSE   Who has 192.168.2.100?  Tell 192.168.2.126  14
0.000918    185.984515  D-Link_be:dd:c3 Broadcast   ARP 60  FALSE   Who has 192.168.2.126?  Tell 192.168.2.100  15
15.894551   201.879066  Dell_e8:9e:86   Broadcast   ARP 42  FALSE   Who has 192.168.2.100?  Tell 192.168.2.3    16
0.000274    201.87934   D-Link_be:dd:c3 Dell_e8:9e:86   ARP 60  FALSE   192.168.2.100 is at 5c:d9:98:be:dd:c3   17
0.000673    201.880019  D-Link_be:dd:c3 Broadcast   ARP 60  FALSE   Who has 192.168.2.3?  Tell 192.168.2.100    19
0.000003    201.880022  Dell_e8:9e:86   D-Link_be:dd:c3 ARP 42  FALSE   192.168.2.3 is at 14:fe:b5:e8:9e:86 20
13.224288   215.239135  Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    46
30.759934   245.999069  Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    47
3.992188    255.985896  Dell_e6:c4:ac   Broadcast   ARP 60  FALSE   Who has 192.168.2.100?  Tell 192.168.2.116  49
0.000917    255.986813  D-Link_be:dd:c3 Broadcast   ARP 60  FALSE   Who has 192.168.2.116?  Tell 192.168.2.100  50
0.000231    269.99975   Dell_e8:b0:a5   Broadcast   ARP 60  FALSE   Who has 192.168.2.100?  Tell 192.168.2.2    61
0.000876    270.000626  D-Link_be:dd:c3 Broadcast   ARP 60  FALSE   Who has 192.168.2.2?  Tell 192.168.2.100    62
2.696277    276.760045  Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    67
1.298432    307.478784  Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    84
1.150452    338.238632  Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    103
1.904422    357.00038   D-LinkIn_1f:ec:2a   Broadcast   ARP 60  FALSE   Who has 192.168.2.100?  Tell 192.168.2.1    114
0.000845    357.001225  D-Link_be:dd:c3 Broadcast   ARP 60  FALSE   Who has 192.168.2.1?  Tell 192.168.2.100    115
2.15736 368.99849   Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    122
1.623439    399.759534  Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    141
0.63662 430.4783    Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    159
0.085976    461.238138  Dell_e5:d8:59   Broadcast   ARP 60  FALSE   Gratuitous ARP for 192.168.0.120 (Reply)    178

asked 17 Dec '11, 02:35

drawat's gravatar image

drawat
1222
accept rate: 0%

edited 17 Dec '11, 02:42

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245


What is considered normal all depends on the way your network has been set up. The ARP's look OK to me, apart from the ones from 192.168.0.120. Is this a /24 subnet, then it is on the wrong subnet. If it is a /22 or greater, then it's fine.

However, ARP requests are totally independent on whether you do TCP offloading (checksum, segmentation or even chimney), so I don't really get our question.

permanent link

answered 17 Dec '11, 02:50

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×146
×78
×10

question asked: 17 Dec '11, 02:35

question was seen: 5,052 times

last updated: 17 Dec '11, 02:50

p​o​w​e​r​e​d by O​S​Q​A