My computer is connected to a ethernet. The service provider distributed 5 connections through one switch. MAC address of switch is fe:dc:05:41:38:8k (manipulated for privacy). The MAC address of my computer is cx:cm:1d:2k"58:a8. I am getting arp packets as given below:
04:47:05 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:47:05 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.67.84
04:47:08 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:47:08 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.65.250
04:47:11 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:47:11 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.68.131
04:47:13 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:47:13 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.69.72
04:47:13 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:47:13 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.70.217
04:47:20 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:47:20 [1] ARP Request- 111.11.48.1 is asking for L2 of 111.11.59.83
04:47:23 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:47:23 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.69.169
04:47:25 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:47:25 [1] ARP Request- 111.11.48.1 is asking for L2 of 111.11.61.223
04:47:25 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:47:25 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.65.239
04:47:28 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:47:28 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.65.22
04:47:30 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:47:30 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.70.141
04:47:39 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:47:39 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.67.226
04:47:42 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:47:42 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.68.11
04:47:43 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:47:43 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.68.199
04:47:43 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:47:43 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.67.45
04:47:48 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:47:48 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.70.187
04:47:51 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:47:51 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.71.228
04:47:57 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:47:57 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.70.184
04:47:58 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:47:58 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.70.5
04:47:59 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:47:59 [1] ARP Request- 111.11.48.1 is asking for L2 of 111.11.56.246
04:47:59 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:47:59 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.64.232
04:48:04 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:48:04 [1] ARP Request- 111.11.48.1 is asking for L2 of 111.11.48.70
04:48:05 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:48:05 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.66.233
04:48:07 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:48:07 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.69.138
04:48:14 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:48:14 [1] ARP Request- 111.11.48.1 is asking for L2 of 111.11.63.107
04:48:24 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:48:24 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.67.132
04:48:26 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:48:26 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.65.185
04:48:32 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:48:32 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.67.213
04:48:35 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:48:35 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.66.58
04:48:36 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:48:36 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.65.8
04:48:36 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:48:36 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.69.167
04:48:37 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:48:37 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.70.202
04:48:43 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:48:43 [1] ARP Request- 111.11.48.1 is asking for L2 of 111.11.59.83
04:48:47 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:48:47 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.64.43
04:48:48 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:48:48 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.69.203
04:48:48 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:48:48 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.67.97
04:48:48 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:48:48 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.68.229
04:48:49 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:48:49 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.64.79
04:48:49 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:48:49 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.70.214
04:48:57 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:48:57 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.69.126
04:49:04 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = cx:cm:1d:2k"58:a8
04:49:04 [1] ARP Request- 111.11.48.1 is asking for L2 of 111.11.61.206
04:49:04 [2] Reponse Ethernet Info: [Source] = cx:cm:1d:2k"58:a8 + [Destination] = fe:dc:05:41:38:8k
[2] ARP Response- 111.11.61.206 has layer 2 address: cx:cm:1d:2k"58:a8
04:49:04 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:04 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.69.230
04:49:04 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:04 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.70.227
04:49:04 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:04 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.65.157
04:49:12 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:12 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.66.194
04:49:13 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:13 [1] ARP Request- 111.11.48.1 is asking for L2 of 111.11.48.184
04:49:14 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:14 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.65.124
04:49:15 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:15 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.69.121
04:49:18 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:18 [1] ARP Request- 111.11.48.1 is asking for L2 of 111.11.53.93
04:49:22 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:22 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.68.214
04:49:26 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:26 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.67.56
04:49:26 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:26 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.71.220
04:49:26 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:26 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.68.224
04:49:27 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:27 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.69.6
04:49:28 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:28 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.67.171
04:49:30 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:30 [1] ARP Request- 111.11.48.1 is asking for L2 of 111.11.61.174
04:49:32 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:32 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.67.47
04:49:34 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:34 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.69.183
04:49:34 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:34 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.68.213
04:49:42 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:42 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.69.219
04:49:42 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:42 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.69.53
04:49:49 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:49 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.64.98
04:49:54 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:54 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.70.113
04:49:54 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:54 [1] ARP Request- 111.11.48.1 is asking for L2 of 111.11.58.177
04:49:59 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:49:59 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.64.115
04:50:01 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:50:01 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.65.15
04:50:01 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:50:01 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.64.148
04:50:02 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:50:02 [1] ARP Request- 111.11.48.1 is asking for L2 of 111.11.56.246
04:50:03 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:50:03 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.70.180
04:50:10 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:50:10 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.66.48
04:50:18 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:50:18 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.70.18
04:50:19 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:50:19 [1] ARP Request- 111.11.48.1 is asking for L2 of 111.11.50.1
04:50:23 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:50:23 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.70.77
04:50:28 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:50:28 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.71.1
04:50:28 [1] ARP Request Ethernet Info: [Source] = fe:dc:05:41:38:8k + [Destination] = ff:ff:ff:ff:ff:ff
04:50:28 [1] ARP Request- 000.00.64.1 is asking for L2 of 000.00.65.123
I asked the service provider technician he said the L2 for each arp request is changing because of dynamic IP. but the rate of arp request is too high. I suspect it is ARP spoofing.