This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

60 who has 169.254.25.31

0

I am seeing many of this type of listing "60 who has 169.254.25.31? tell 10.248.252.50" Can you please tell me what it means?

Thanks

asked 01 Apr '12, 21:24

dbruce's gravatar image

dbruce
1111
accept rate: 0%

edited 21 Sep '12, 08:34

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142


One Answer:

2

That's an Address Resolution Protocol (ARP) packet. The machine with an IP address of 10.248.252.50 wants to send a packet to the machine with an IP address of 169.254.25.31, and believes that machine is on the same network as it, so it's sending a broadcast packet on the network in the hopes of getting back a packet giving the MAC address (such as an Ethernet address) for that machine.

answered 02 Apr '12, 00:48

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

1

169.254.0.0/16 is the APIPA range. How can a system with 10.248.252.50 believe it is in the same subnet? That would be only possible with a netmask of /0 (which does not make any sense)!?

@dbruce: Please check the configuration of the system 10.248.252.50.

(21 Sep '12, 09:27) Kurt Knochner ♦