 | 1 | initial version |
If you see ARP requests for other IP addresses on your subnet (so for IP addresses that are not the IP address of the host you're capturing on) and sent by other systems than the host you are capturing on, then it is correct that you only see the requests.
This is because the requests are send by broadcast (so every system in the subnet will see them), but the response is sent with an unicast to the system that sent the ARP request. On a switched network, the packet will only be sent to the port on which that system is connected.
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
