Re: ARP packets usage



Moe Trin wrote:
On Wed, 24 Oct 2007, in the Usenet newsgroup comp.os.linux.networking, in
article <1193265460.173380.238880@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>, Philippe
Signoret wrote:

NOTE: Posting from groups.google.com (or some web-forums) dramatically
reduces the chance of your post being seen. Find a real news server.

I ran Ethereal and captures all packets for 1 minute and 49 seconds.

What network? What is on this network?

TCP 353 70.2%
UDP 15 3.0%
ICMP 13 2.6%
ARP 122 24.3%

Fairly quiet - but without knowing _what_ you are looking at, it is
difficult to say if this is normal or not. For example, if you
are looking at a DSL connection, you are not likely to see any
mono-cast traffic (traffic to/from a single IP address) that is not
directed at your host. But you will _PROBABLY_ see all _broadcast_
traffic, where the router/switch does not know if "you" are the
destination or not.

Is this a normal ARP packet percentage? It seems a bit high to me.

Not enough information. The other question is what operating system
are the hosts running? That may also have impact on the traffic.

Old guy

little question don't routers split up broadcast domains ?
and thus broadcasts from the WAN side shouldn't be forwarded to the LAN
or does that in general only occurs in the reverse (eg from LAN -> WAN) ?
.



Relevant Pages

  • We have lots of users with SonicWalls for VPN connectivity in to FW-1, possible major security hole
    ... With default rule disabled: Disable default Src: LAN Dst: ALL ... The firewall WAN address is 24.184.168.52 ... A NT server on the internal LAN is 192.168.1.22 ... why is my internal server responding to this packet as a "Destination ...
    (Incidents)
  • Re: SBS 2003 - dual nics connectivity problem
    ... sbs 2003 servers, both with a nic for wan and a nic for lan. ... The problem is that after a day or so of running with both nics ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 - dual nics connectivity problem
    ... Paul Barker typed: ... both with a nic for wan and a nic for lan. ... I've tried different nics, ...
    (microsoft.public.windows.server.sbs)
  • Re: Special configuration of DHCP, NAT
    ... DSL modem and NAT's the LAN. ... scrub in on $WAN all ... pass out on $WAN proto tcp from any to any modulate state flags S/SA ... pass in on $WAN inet proto icmp from any to any icmp-type $icmp_types keep state ...
    (comp.unix.bsd.openbsd.misc)
  • Re: WAN speed issue
    ... environment, bits and bytes move at a speed of 10, 100 or possibly 1000 ... Therefore you are doomed to slowdown when connected through WAN. ... is true even on a LAN. ... > more likely design for a LAN environment and not via WAN which means ...
    (microsoft.public.access.tablesdbdesign)