ARP Flooding by the Router

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

ARP Flooding by the Router

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

MuhammadIstiaq

2022-07-13 09:30:47

Posts: 2

Helpful: 0

Solutions: 0

Stories: 0

Registered: 2022-07-13

ARP Flooding by the Router

2022-07-13 09:30:47

Tags:

Model: Archer C24

Hardware Version: V1

Firmware Version: 1.4.3 Build 201022 Rel.55840n(5553)

Hello everyone.
I bought my C24 just 4-5 days back. It's working so-so.

My router is broadcasting ARP packets throughout the network. It's just constantly releasing ARP broadcast packets into my network
and asking for all the other devices' MAC addresses.

I've used Wireshark tool on my laptop to detect this problem. This is creating a ARP Flood in my wifi Network.

No other device is doing this because the Wireshark tool is clearly showing that the packet is being sourced from my Router's IP adderss 192.168.0.1

Below is the log from the Wireshark tool

7   1.244375   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.107? Tell 192.168.0.1
8   2.268297   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.102? Tell 192.168.0.1
9   2.268406   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.107? Tell 192.168.0.1
10   3.292275   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.102? Tell 192.168.0.1
11   3.292383   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.107? Tell 192.168.0.1
14   4.214297   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.102? Tell 192.168.0.1
33   13.225285   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.106? Tell 192.168.0.1
34   13.225405   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.108? Tell 192.168.0.1
35   13.225468   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.100? Tell 192.168.0.1
38   14.249080   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.106? Tell 192.168.0.1
39   14.249206   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.108? Tell 192.168.0.1
40   14.249291   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.100? Tell 192.168.0.1
42   15.273073   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.106? Tell 192.168.0.1
43   15.273183   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.108? Tell 192.168.0.1
76   19.266697   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.104? Tell 192.168.0.1
77   20.290616   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.104? Tell 192.168.0.1
79   21.212676   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.104? Tell 192.168.0.1
84   23.260274   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.111? Tell 192.168.0.1
86   24.284162   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.111? Tell 192.168.0.1
87   25.308239   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.111? Tell 192.168.0.1
88   26.229931   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.100? Tell 192.168.0.1
90   27.253784   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.106? Tell 192.168.0.1
91   27.253936   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.108? Tell 192.168.0.1
98   28.278282   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.108? Tell 192.168.0.1
105   29.302181   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.108? Tell 192.168.0.1
173   33.295525   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.107? Tell 192.168.0.1
182   34.217157   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.102? Tell 192.168.0.1
183   34.217286   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.107? Tell 192.168.0.1
202   35.241088   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.102? Tell 192.168.0.1
203   36.265029   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.102? Tell 192.168.0.1
212   38.210734   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.100? Tell 192.168.0.1
219   39.234647   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.100? Tell 192.168.0.1
220   40.258760   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.100? Tell 192.168.0.1
221   41.287137   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.108? Tell 192.168.0.1
230   45.276241   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.103? Tell 192.168.0.1
233   46.300388   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.103? Tell 192.168.0.1
234   46.300527   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.107? Tell 192.168.0.1
242   47.221876   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.103? Tell 192.168.0.1
243   47.221976   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.107? Tell 192.168.0.1
244   47.222033   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.106? Tell 192.168.0.1
284   48.245861   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.107? Tell 192.168.0.1
285   48.245984   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.106? Tell 192.168.0.1
289   49.269899   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.106? Tell 192.168.0.1
290   51.215438   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.104? Tell 192.168.0.1
298   52.239304   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.104? Tell 192.168.0.1
299   53.263647   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.104? Tell 192.168.0.1
300   53.263766   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.108? Tell 192.168.0.1
301   53.263827   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.106? Tell 192.168.0.1
304   54.287544   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.106? Tell 192.168.0.1
308   55.209023   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.111? Tell 192.168.0.1
312   56.233042   TP-Link_b1:30:90   Broadcast   ARP   42   Who has 192.168.0.111? Tell 192.168.0.1

1 Reply

Kevin_Z

2022-07-20 06:13:50

Posts: 21587

Helpful: 5043

Solutions: 2543

Stories: 21

Registered: 2018-12-24

Re:ARP Flooding by the Router

2022-07-20 06:13:50

Hello @MuhammadIstiaq

Thank you for posting on the TP-Link Community.

As per the part of the data you posted, it seems the router is inquiring about the local network for those clients connected to the network to renew their IP info, but I cannot know that for sure. Can you email us the data captured by Wireshark for further analysis? You can email support.forum@tp-link.com with the thread ID and subject.

If you could give us more details about the network devices, how are they connected to each other, and how many in total, that would be great.

Nice to Meet You in Our TP-Link Community. Check Out the Latest Posts: Connect TP-Link Archer BE550 to Germany's DS-Lite (Dual Stack Lite) Internet via WAN Archer GE550 - BE9300 Tri-Band Wi-Fi 7 Gaming Router EasyMesh Is Available When Wi-Fi Routers Work in AP Mode as A Controller. Archer AX55V2 Supports WireGuard VPN, EasyMesh Ethernet Backhaul, IoT Network, Speed Limit,and More If you found a post or response helpful, please click Helpful (arrow pointing upward icon). If you are the author of a topic, remember to mark a helpful reply as the "Recommended Solution" (star icon) so that others can benefit from it.

ARP Flooding by the Router

ARP Flooding by the Router

Information

Voters 0

Tags