Wireshark-users: Re: [Wireshark-users] Help on data from wiresharck
From: Graham Bloice <graham.bloice@xxxxxxxxxxxxx>
Date: Wed, 4 Oct 2017 10:51:46 +0100


On 3 October 2017 at 10:24, Antonio Bernabei <abernabei@xxxxxxxxxxxxxxxxxx> wrote:
Hello

I have just installed wireshark and I have this line

2336    191.200998    HuaweiTe_21:8d:a5    Broadcast    ARP 60    Who has 169.254.88.123? Tell 192.168.1.111

What is happening?

192.168.1.111 is a gateway on our lan

Thanks

Antonio Bernabei

 
This is an Address Resolution Protocol (ARP) request, and is normal for an Ethernet network.  The gateway is requesting the MAC address for the host that is using IP 169.254.88.123 as it presumably has some IP traffic for it.

See the Wireshark Wiki page for more info: https://wiki.wireshark.org/AddressResolutionProtocol

--
Graham Bloice