I have been sitting for a long time with a Wi-Fi router. And constantly some interruptions in communication.

I go to Wireshark and see what and how. And I see the АRP request from my computer (they say who is 192.168.1.3) in the network of 6-8 devices. Then I look and there are so many of these requests.

Somewhere 30 pieces per minute, and the router tries to answer everything. But that's not all! All the absurdity that after answering the computer further throws the same ARP requests and the router responds to them again. Besides, it even seems to me that ARP requests are not formed correctly. They contain ip address + Mac, which the router asks.

1 of ARP packages

  • What's the problem? Thirty requests per minute is nothing at all, not a load. - etki
  • Why does he not just cache ip and that's it? The fact is that the network is loaded because of this garbage, and it is so weak - cplusplus
  • There is five kilobytes per minute, well, what a load. - etki
  • But this should not be so. Whether it is not enough, can the malware tries to get out or what. So I wanted to understand - cplusplus
  • Both MACs are present, since this is not a search for a host, but an update of the arp-table with a known host. why so much is not clear, I agree that this should not be. The feeling that the timeout for updating the arp-table entries is 2 seconds (30 times per minute), which is unusual for windows. This can be observed with the loss of response packets, which can not be if wireshark is running on 1.3 (he saw them) - Mike

0