Unusual Broadcast on a single PC.

May 28, 2012 at 20:01:26
Specs: Windows XP
Good day to all!

Is it normal for a pc to send broadcast to ip address that don't really exist? I am using wireshark to sniff my company's network activity and im seeing something like this.

who has 192.168.2.102 tell 192.168.2.235
who has 192.168.2.103 tell 192.168.2.235
who has 192.168.2.104 tell 192.168.2.235
who has 192.168.2.105 tell 192.168.2.235
who has 192.168.2.106 tell 192.168.2.235

but ip address 192.168.2.102 - 192.168.2.106 are currently not being in use...

Tnx for all ur help.. By the way I am new to networking so forgive my innocence. :)


See More: Unusual Broadcast on a single PC.

Report •

#1
May 29, 2012 at 06:41:48
broadcasts go to the entire subnet which is why its called a broadcast.

Answers are only as good as the information you provide.
How to properly post a question:
Sorry no tech support via PM's


Report •

#2
May 29, 2012 at 06:55:18
Sorry, but im really new to networking and don't know all the concepts in networking. Yes broadcast goes out to all ports of the switch but all those ip address that i mentioned above are all vacant and not currently being used.

Report •

#3
May 29, 2012 at 08:55:46
But how does wireshark know that those addresses are unused? Have you told it somehow?

Report •

Related Solutions

#4
May 29, 2012 at 09:09:33
Question that needs answering is what at 192.168.2.235 is asking the questions.

Could be as simple as a network discovery request.

Answers are only as good as the information you provide.
How to properly post a question:
Sorry no tech support via PM's


Report •

#5
May 29, 2012 at 17:38:33
It's an arp request. I manually check those ip addresses and its not being in use. are we having a network problem?

Report •

Ask Question