Ethereal-users: Re: [Ethereal-users] arp packet shows odd info

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Sat, 8 Feb 2003 12:56:50 -0800
On Fri, Feb 07, 2003 at 07:10:57PM -1000, John Covey wrote:
> Was wondering why ethereal shows a FQDN in my arp packets. This FDQN
> shows up in parentheses beside the destination mac address field of the
> packet.

Probably because it was either able to resolve the IP address in that
ARP packet corresponding to that MAC address or it saw, in the capture,
a DNS packet giving the name for that IP address.

> These arp requests show that they are for hosts on the local
> subnet looking for an unknown mac (of course) and this mysterious FDQN
> is on another network elsewhere in my infrastructure. This shows up in
> all arp requests. 

Did the MAC address in the ARP packet have an IP address going along
with it - e.g., was it an ARP reply giving the MAC address for that IP
address?  Is the FQDN the name for that IP address (or *a* name for that
IP address)?