Ethereal-users: Re: [Ethereal-users] High no of arp requests

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Martin Regner" <martin.regner@xxxxxxxxx>
Date: Fri, 18 Jun 2004 19:29:25 +0200
Phil Cassia wrote:
<Is it normal for PC's mainly Winxp to do arp requests to the next ip in
<the address range eg. 192.168.10.15 will request mac adress for
<192.168.10.16 even if it doesn't exist.

No, it is not normal.
Could maybe be Welchia worm.

http://www.ethereal.com/lists/ethereal-users/200405/msg00298.html

http://www.ethereal.com/lists/ethereal-users/200405/msg00332.html

http://www.ethereal.com/lists/ethereal-users/200405/threads.html#00337