ARP: can't see broadcast packets
System configurations:
- Wireshark 3.2.3
- Ubuntu 20.04
- Wireless card in promiscuous mode
When I try to capture ARP packets I can notice two strange things:
- In the packets panel the ARP destination always contains my MAC address and not the word "Broadcast" even if within the packet the destination address is
00:00:00:00:00:00
. - I never see in the packets panel broadcast packets for IP addresses different than mine. In other words I can only see ARP request packet "Who has X?" where X is always my IP address (of course I can see my ARP replies)
Perhaps 00:00;00:00:00:00 matches your machine due to a config file containing the match. A sample file would go a long way.