|
Posted by Ertugrul Soeylemez on January 20, 2007, 1:18 pm
If you were Registered and logged in, you could reply and use other advanced thread options chrismc911@hotmail.com (07-01-20 07:55:51):
> > Yes. The address "0.0.0.0" is the "any" address. That means, "any"
> > host should answer that request. The MAC address you're seeing is
> > some random MAC address from your network (most likely).
>
> I am sorry but I got something wrong in my post. Had a look at the
> logs again and the ARP requests comes from 0.0.0.0 and a valid
> destinatin IP which I think is the IP of the host sending the request
> out.
>
> I think this packet is sent when the host comes up. Something like
> Windows sending out an unsolicited ARP reply to its own IP address to
> check if another host has the IP address assigned.
In that case, the packet is probably not a request, but rather a reply,
and the _destination_ IP address is 0.0.0.0. That would make sense, and
it would mean that the particular machine is just distributing its MAC
address into the network.
Regards,
E.S.
|