ARP chatter

From: Island Techie (island_techie_at_yahoo.ca)
Date: 11/30/04 

Date: Tue, 30 Nov 2004 01:36:56 GMT

I know this topic has been discussed before but I would like to clarify a
few things for anyone out there who knows something about ARP broadcasts and
cable modems.

I believe I have noticed an increase of ARP chatter on my cable modem, I
noticed this the other night when I accidentally locked the cat out, I reach
over to open the window and noticed a steady flicker on the back of my
server, thinking this was an attack I quickly started capturing packets and
noticed it was a constant flow of ARP incoming traffic, much of it
repetitive data. After doing some research and communicating with my ISP
tech support I understand it is normal but how much is normal, and why have
I never noticed this steady traffic before?

The traffic is a lowly 1.4KB but seems to have increased over the last few
months. Any information would be helpful.

Relevant Pages

  • Re: Why so much ARP traffic?
    ... Is there anyway to set the arp requests so they don't check every pc possible address on the subnet? ... just put away the network sniffer and forget about it. ... Ok I was having a problem thats why I was doing the sniffing in the first place sometimes ... thing out of the ordinary was the huge amount of arp broadcasts. ...
    (microsoft.public.win2000.networking)
  • RE: ARP broadcasts
    ... Subject: ARP broadcasts ... cable modem network. ... > anything more sinister that ARP packets can do? ...
    (Focus-IDS)
  • Re: ARP broadcasts
    ... Subject: ARP broadcasts ... > addresses and a lot of those are cable modem addresses. ... > flood of arps that codered scans are generating. ...
    (Focus-IDS)
  • RE: ARP broadcasts
    ... > To: Focus IDS ... > Subject: ARP broadcasts ... > anything more sinister that ARP packets can do? ...
    (Focus-IDS)