AD domain controllers producing excessive ARP replies

R

RJ

I have been sniffing a domain with 3 domain controllers on
the LAN. When one domain controller does an ARP broadcast
for a ceratin IP, the IP should respond to the broadcast
to the domain controller with its own MAC address.
Instead, the domain controller immediately sends out
anywhere from 25 to 50 ARP replies about its own MAC
address to other workstations that have not requested it.
This happens often with all 3 domain controllers. Does
anyone know what the causes this?

Thanks,
RJ
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top