 | 1 | initial version |
In your capture file there are broadcast packets for 192.168.1.255, so I assume your subnet-mask is 255.255.255.0.
Just before the prototype (192.168.1.5) stops responding to the SYN packets of 192.168.1.50, there are 3 ARP requests for 192.168.2.50. When the subnet mask is 192.168.2.50, there should not be an arp for systems in 192.168.2.0/24. As after 3 ARP packets for 192.168.2.50 there are no responses to 192.168.1.50 anymore, I suspect that the ARP requests for 192.168.2.50 in reality should have been ARP requests for 192.168.1.50.
You might want to look into the networking code of the prototype to see if there is an off-by-one error in the code that is responsible for creating the ARP requests.
