Re: ARP request retransmitting

From: Charles Swiger (cswiger_at_mac.com)
Date: 11/08/05

  • Next message: M. Warner Losh: "Re: FreeBSD/xbox: updated 7.0 patchset"
    Date: Mon, 7 Nov 2005 19:49:30 -0500
    To: John-Mark Gurney <gurney_j@resnet.uoregon.edu>
    
    

    On Nov 7, 2005, at 6:45 PM, John-Mark Gurney wrote:
    >> Really? You're saying that "tcpdump -nt arp" never shows any
    >> requests except those made by the local host?
    >>
    >> Which vendor and which switch model?
    >
    > Just a random search for smart arp large, turned up user's manual
    > for the WaveSwitch 9000, from Plaintree Systems..
    >
    > The docs say:
    > Address Resolution Protocol (ARP) is the means by which a host or
    > router
    > maps an IP address to a physical address. WaveSwitch 9000 software
    > contains the SmartARP feature that allows for reduced impact of ARP
    > broadcasting.
    >
    > Normally, ARP broadcasts are flooded to all ports on a switch. Switch
    > ports that are not connected to the target host must, therefore,
    > receive
    > and partially process the broadcast frames. This can potentially
    > affect
    > the performance of all hosts on the bridged network.
    [ ... ]
    > A coworker also says that the Foundary switches can do it, and did
    > it like five years ago... I haven't confirmed this myself...

    OK, I appreciate the response and the pointer to a specific model.

    This being said, I'd prefer a first-hand account from someone who has
    actually run tcpdump for a few days on a production network and
    confirmed that this feature really works as advertised. (There can
    be a big difference between what the documentation claims a switch
    does, and what the switch actually does. In particular, switch
    vendors have also claimed that VLAN tagging was reliable and secure
    and that traffic from one VLAN could never leak to a port on another
    VLAN...)

            -----

    I think your other comment about extending the lifespan of entries in
    the ARP cache is a more useful idea, at least for extending the
    lifespan of valid entries. Negative response to an ARP request
    should not be cached for very long.

    Does FreeBSD update the ARP cache when ARPOP_REQUESTs are seen?
    At the very least, one could refresh the timer if you have an entry
    for the host making the request...

    -- 
    -Chuck
    _______________________________________________
    freebsd-arch@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-arch
    To unsubscribe, send any mail to "freebsd-arch-unsubscribe@freebsd.org"
    

  • Next message: M. Warner Losh: "Re: FreeBSD/xbox: updated 7.0 patchset"

    Relevant Pages

    • Re: ARP request retransmitting
      ... Address Resolution Protocol (ARP) is the means by which a host or router ... ARP broadcasts are flooded to all ports on a switch. ... and partially process the broadcast frames. ...
      (freebsd-arch)
    • Re: [2.4 PATCH] bugfix: ARP respond on all devices
      ... >> Hm, what rule is broken by the remote host, then? ... > such remote systems. ... > replies to ARP requests. ... conservative way to _request_ arp would definitely be to request it from the ...
      (Linux-Kernel)
    • Re: ARP Spoof Question
      ... I would assume that it would be the last ARP response that the system ... sent a request or not. ... > Q2.The switch also updates its table of IP/MAC address bindings, ...
      (Security-Basics)
    • Arp Table Entries are invalid
      ... The server is running Windows 2003 R2 Enterprise. ... When I ping a from Host A to Host B, ... Once the ARP Table is updated with the correct MAC periodically, ... All servers are on the same switch. ...
      (microsoft.public.windows.server.networking)
    • Re: Duplicate Echo Replies with Channel Bonding
      ... In this mode both interfaces receive packets, ... >When both eth0 and eth1 are up and I ping from Host C to Host A I get ... >The destination network 192.168.120.0/24 exists on both Router A and ... Switch B does not have the MAC address in its MAC address table ...
      (RedHat)