Question Address Resolution Protocol Question (ARP)

Dec 28, 2018
23
0
20
1
I have a question, i am using wireshark on a home network, and i don't know much about networking just starting to learn but on wireshark i see a source named "Technico" broadcasting asking different local ip's for there mac addresses, but non stop for example it will go " who has 10.0.0.11? Tell 10.0.0.1" and as that is the IP of the raspberry pi that is running wireshark it responds back to "technico" with "10.0.0.11 is at (mac address)" and then it keeps broadcasting asking for other addresses then about 15-20 seconds later it will ask for 10.0.0.11 again to again get the same response back, is this normal and just how the protocol works? in my head i would think after it gets a response it would log the data and maybe re-validate the info in at least a day or two.

if you can respond with a lot of detail as i would like to learn
 
It depends on how long the timeout is set. Not sure why it that short many devices around 5-15 minutes. Whenever it times out the device will send a arp if it still needs to send traffic. Maybe the device is not updating its table or thinks it is not getting a response.
 
Dec 28, 2018
23
0
20
1
It depends on how long the timeout is set. Not sure why it that short many devices around 5-15 minutes. Whenever it times out the device will send a arp if it still needs to send traffic. Maybe the device is not updating its table or thinks it is not getting a response.

it sends a request every second just about, even asking request's from ip's that aren't assigned to any device, or maybe offline devices/out of range devices



Wireshark is an application that captures and displays data traveling back and forth on a network.

A source named "Technico" broadcasting may be a Technicolor router with wireless that someone else in your area is using.
For example:
https://www.amazon.co.uk/Technicolour-TG582n-Port-Wireless-Router/dp/B005ELFTH4

This could be it, but why would it be asking for ip's on my network that is password protected, and why would the devices on my network respond to it? and the raspberry pi is connected to the network using WIFI
 

ASK THE COMMUNITY