I am studying for network and I have a question for ARP echo issue.
I use Wireshark for packet capture, and I OS is windows 7.
contents
ARP Basics ARP stands for Address Resolution Protocol. When you try to ping an IP address on your local network, say 192.168.1.1, your system has to turn the IP address 192.168.1.1 into a MAC address. This involves using ARP to resolve the address, hence its name.
Systems keep an ARP look-up table where they store information about what IP addresses are associated with what MAC addresses. When trying to send a packet to an IP address, the system will first consult this table to see if it already knows the MAC address. If there is a value cached, ARP is not used.
If the IP address is not found in the ARP table, the system will then send a broadcast packet to the network using the ARP protocol to ask "who has 192.168.1.1". Because it is a broadcast packet, it is sent to a special MAC address that causes all machines on the network to receive it. Any machine with the requested IP address will reply with an ARP packet that says "I am 192.168.1.1", and this includes the MAC address which can receive packets for that IP.
I understand ARP is "When trying to send a packet to an IP address, the system will first consult this table to see if it already knows the MAC address. If there is a value cached, ARP is not used."
my topology is [PC-A] - [Switch] - [PC B]
Q. I command to ping [PC B] to [PC A] and I check ARP table is updated.
and a same ping command to [PC B] to [PC A] again.
Already knows the MAC address. but ARP re-echo happend.
looks like that.
I don't have understand for re-echo ARP issue.
