AD domain controllers producing excessive ARP replies

  • Thread starter Thread starter RJ
  • Start date Start date
R

RJ

I have been sniffing a domain with 3 domain controllers on
the LAN. When one domain controller does an ARP broadcast
for a ceratin IP, the IP should respond to the broadcast
to the domain controller with its own MAC address.
Instead, the domain controller immediately sends out
anywhere from 25 to 50 ARP replies about its own MAC
address to other workstations that have not requested it.
This happens often with all 3 domain controllers. Does
anyone know what the causes this?

Thanks,
RJ
 
Back
Top