Jump to content
bobbeling

Excessive ARP Requests

Recommended Posts

bobbeling

I was reviewing my network with Wireshark and noticed the incredible amount of ARP requests that Domotz outputs. It sends an ARP request to every IP address in my network. I have 2 VLANs that Domotz monitors. Is every 30 seconds really necessary? Looking at my L3 network switch, it looks like my CPU jumps up 10% every 30 seconds. Not a huge impact, but it seems a bit excessive. 

 

Anyone else notice this? Is there a way to change the frequency?

  • Upvote 2

Share this post


Link to post
Share on other sites
Tommaso

Hi all,

our scan frequency is currently not customisable: it's part of our core infrastructure and we must pay very close attention to any adjustment.
This high rate is needed to send real-time alert.

Share this post


Link to post
Share on other sites
NorthBT

Hi folks,

We are also seeing large amounts of broadcast ARPs - 500 broadcasts over a 1s period, every 30 seconds. Although this may be acceptable to devices with powerful processors, our humbler devices (10Base-T) are getting heavily loaded by this, and our real application messages are getting slowed/lost. Is it not possible to stagger these ARPs, or send unicast to known devices, rather than hitting a network so heavily, so often?

We also notice broadcast ARPing to subnet-broadcast address x.x.x.255/24 and x.x.x.0/24?

 

 

  • Upvote 2

Share this post


Link to post
Share on other sites
DanielW

tapping into this. Is there a way to tweak broadcasting or use unicast? I was troubleshooting our network performance an 3.5 million packets a day.

happy to sacrifice realtime alers for the network. for the moment turning off domotz :(

Capture.PNG

  • Upvote 1

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...