If you see ARP requests for other IP addresses on your subnet (so for IP addresses that are not the IP address of the host you're capturing on) and sent by other systems than the host you are capturing on, then it is correct that you only see the requests.
This is because the requests are send by broadcast (so every system in the subnet will see them), but the response is sent with an unicast to the system that sent the ARP request. On a switched network, the packet will only be sent to the port on which that system is connected.
Asked: 2019-08-21 08:15:50 +0000
Seen: 8,775 times
Last updated: Aug 21 '19
Not really sure what you mean. Do you seen ARP requests go out for your network interfaces IP address, or do you see them for another address on your network, or off your network? What capture engine do you use? Either WinPcap, Npcap or something else? On what platform, and does it have VPN and or firewalls installed? etc.
It is on the same network, I use WinPcap