1 | initial version |
These resolutions come from the well-known-addresses file, called 'wka'. And if it was 02:0F:B5:xx:yy:zz it must have said 'MS-NLB-VirtServer'. As for the use of the MAC addresses in ARP messages you would have to specify where in the ARP message the occurred.