If you want to "REALLY" see what's going on, open an Xterm Window and
fire up "iptraf" (which runs in text mode) as the root user.
In it's configuration screen turn on PROMISCUOUS mode and Reverse DNS
resolution.
The go to IP Traffic Monitor for the interface connected to your Cable
modem.
You'll see the ARP requests at the bottom, while any other TCP traffic
at top, including source and destinations...
And I'm also seeing a slew of ARP requests today... Which is nominal for
@home
-JMS
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Roger Sherman
Sent: Sunday, August 05, 2001 3:47 AM
To: 'Glenn Johnson'
Cc: Jose M. Sanchez; 'Brandon Caudle'; [EMAIL PROTECTED]
Subject: Re: [expert] Re: mysterious incoming packets
On Sun, 5 Aug 2001, 'Glenn Johnson' wrote:
> On Sun, Aug 05, 2001 at 01:06:12AM -0400, Jose M. Sanchez wrote:
>
> > It's unlikely that this is a problem given the relatively ARP low
> > rate you are getting.
> >
> > A normal Cable modem "node" may have over 10,000 users.
> >
> > The head-end system has to update it's table of available
> > (connected) IP's almost constantly.
> >
> > If you call the cable company, all you are going to get will be a
> >
> > "yeah, well, this is normal." response...
>
> Well, that may be the case. The thing is though, it is not normal. I
> have had this cable modem service for about a year and this is the
> first time I have seen this behavior. Even today, this morning
> everything was normal (no activity) then at about noon CST the arp
> requests started flooding in.
I'm having the same phenomenon occur...I don't know if its the ARP thing
you are talking about, but all day long gkrellm has been showing around
2k on ethO (I too have a cable modem). Before last night, that never
happened before. I'd see miniscule rates from time to time, for a
moment, but never anywhere near 1k...
>
>
peace,
Rog
