10-16-2011, 02:43 AM
Hi
I'm on switched LAN. I used Wireshark because I suspect somebody eavesdrops my communication between my computer and the gateway.
I was looking at ARP requests in the form WHO HAS A TELL B. I found out that:
1) there are plenty of requests WHO HAS gateway_ip TELL some_node_ip with destination broadcast
2) there are a few request WHO HAS my_ip TELL some_node_ip with destination broadcast
3) there are plenty of requests WHO HAS some_node_ip with destination broadcast
4) there are requests that seems strange to me, namely:
WHO HAS my_ip TELL gateway_ip with destination my_MAC_address
So my question is:
Why does gateway send ARP request directly to me (not using broadcast address)?
I'm on switched LAN. I used Wireshark because I suspect somebody eavesdrops my communication between my computer and the gateway.
I was looking at ARP requests in the form WHO HAS A TELL B. I found out that:
1) there are plenty of requests WHO HAS gateway_ip TELL some_node_ip with destination broadcast
2) there are a few request WHO HAS my_ip TELL some_node_ip with destination broadcast
3) there are plenty of requests WHO HAS some_node_ip with destination broadcast
4) there are requests that seems strange to me, namely:
WHO HAS my_ip TELL gateway_ip with destination my_MAC_address
So my question is:
Why does gateway send ARP request directly to me (not using broadcast address)?