ARP Console

This is the LINUX console which produced the Wireshark trace.

This was performed right after rebooting the machine.

In LINUX (as in Windows), the -n parameter on the "arp" command means to show only IP addresses, not DNS names.

Lines with a "#" sign in them have comments after the # sign. This is a LINUX (and UNIX) convention.

ifconfig   # Shows the computer I am running on and the netmask 

enp0s25   Link encap:Ethernet  HWaddr 00:27:13:69:b9:38  
          inet addr:192.168.35.200  Bcast:192.168.35.255  Mask:255.255.255.0
          inet6 addr: fe80::55fb:9b56:9e24:8eca/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:4394 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2669 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:5377616 (5.3 MB)  TX bytes:276348 (276.3 KB)
          Interrupt:20 Memory:fc000000-fc020000 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:445 errors:0 dropped:0 overruns:0 frame:0
          TX packets:445 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1 
          RX bytes:34794 (34.7 KB)  TX bytes:34794 (34.7 KB)

arp -n

Address                  HWtype  HWaddress           Flags Mask            Iface
192.168.35.12            ether   f0:79:59:88:8a:50   C                     enp0s25

ping -c1 -n 192.168.35.201  # c1 means only one ping. -n means IP addresses only, not names

PING 192.168.35.201 (192.168.35.201) 56(84) bytes of data.
64 bytes from 192.168.35.201: icmp_seq=1 ttl=64 time=0.276 ms

--- 192.168.35.201 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.276/0.276/0.276/0.000 ms

arp -n

Address                  HWtype  HWaddress           Flags Mask            Iface
192.168.35.12            ether   f0:79:59:88:8a:50   C                     enp0s25
192.168.35.201           ether   c4:54:44:9c:78:a0   C                     enp0s25

ping -c1 -n 98.137.246.8

PING 98.137.246.8 (98.137.246.8) 56(84) bytes of data.
64 bytes from 98.137.246.8: icmp_seq=1 ttl=48 time=84.5 ms

--- 98.137.246.8 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 84.545/84.545/84.545/0.000 ms

arp -n
Address                  HWtype  HWaddress           Flags Mask            Iface
192.168.35.12            ether   f0:79:59:88:8a:50   C                     enp0s25
192.168.35.201           ether   c4:54:44:9c:78:a0   C                     enp0s25

lpr /tmp/a # prints a small file to my printer, which is at 192.168.35.41

arp -n

Address                  HWtype  HWaddress           Flags Mask            Iface
192.168.35.41            ether   00:21:b7:1a:e9:d6   C                     enp0s25
192.168.35.12            ether   f0:79:59:88:8a:50   C                     enp0s25
192.168.35.201           ether   c4:54:44:9c:78:a0   C                     enp0s25