Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Frames 55, 56 and 57 are the same packet sent three times.
In the Frame Protocol Preferences, enable Generate an MD5 hash ... to see that they all have a hash of 90cbc8f1b307827eea099e202cab6eaa.
The router (or something on the other side of the router) would like to contact which, assuming a subnet mask of /24, puts it on the subnet. The router makes an ARP Request to map the IP address to a MAC address to communicate at layer 2. That device doesn't respond to the first ARP, the router waits one second then asks again, waits another one second then asks the third (final) time.
ARP Requests are sent to the Broadcast address ff:ff:ff:ff:ff:ff.

The only frames for eth.addr == 84:2b:2b:ff:d8:c4 are the Multicast queries in frames 543 and 544.


IANA allocates addresses under the IANA OUI (00-00-5E) as explained in 
[RFC7042]. Unicast addresses under the IANA OUI start 
with 00-00-5E, while multicast addresses under the IANA OUI start with 
01-00-5E. In the lists below, these initial 3 bytes are omitted for 
brevity. As described in [RFC7042], 48-bit MAC addresses 
in the range 33-33-00-00-00-00 to 33-33-FF-FF-FF-FF are used for IPv6 multicast.