PDA

View Full Version : ARP Broadcast


ddarwactor
07-24-2011, 12:37 PM
Hi, all! Newbie, here, and this'll be my first post so please forgive me if I'm not in the right place to post this. I'm new to forums in general and presume this is the place to "think out loud". Please, correct me if I'm wrong, thanks!

So, I'm reading along at pg 99 (E-reader version, 7th ed.) about ARP and am wondering why it's necessary for IP to "broadcast" looking for a device with a known IP address but an unknown (not in the ARP cache) hardware address. If the IP address is known, why can't the query for that device's hardware address be directed solely to that IP, rather than forcing all devices on that segment to listen to the query? Isn't the idea to keep broadcasts to a minimum?

If the device has an IP address, for that matter, how did it get it without having it's hardware address placed in the ARP cache in the process?

Any clarification would be greatly appreciated and thanks for taking the time to read this! :)

Edit: I think I may have answered my own question - someone please correct me if I'm wrong. It appears that the ARP broadcast originates from a device that needs but doesn't yet have in its cache the MAC address of another device that it wants to communicate with (say, PC to PC)...and both values (logical and physical address) are needed before direct comms can proceed between them. Although, seems to me that the destination's MAC address would already reside in either a router or switch's ARP cache - but, there's no "ARP server" whose job it is to answer requests for MAC info from any requesting device. So, the ARP broadcast may well pass through devices that already know both the IP and MAC that the source is asking for but it's not their job to answer the query - hence the necessity for a broadcast? I think I'm talking myself in circles, here...

Lion66six
07-24-2011, 03:44 PM
Also consider that its possible the machine already has the IP address of where it wants to go. For example at work I could connect to \\192.168.1.25. Here I'm already feeding the PC the IP address I want to access, now I'm asking it to connect me.

On the plus side it only needs to arp broadcast once per each host within the LAN. With the size of a subnet normally 256 PC's or less, then its not the end of the word if a few arps are flying about :-)

ddarwactor
07-24-2011, 04:35 PM
Makes sense...not much chance of brewing up a broadcast storm there. Thanks for the reply and good luck on your exam (although, I get the impression luck has little to do with passing this thing ;)!!

Fuzz
07-25-2011, 02:02 AM
You kind of did answer it yourself. Imagine a network that hasn't come online yet, and is powered up for the first time. No device knows about any others without someway of asking - where is ...? And that's exactly what arp does. As the switch doesn't know where to find IP address x.x.x.x it has to broadcast arp to get a response. It can then map the replying mac address to that switch port.

If a host does not have it's default gateways mac address, it has to broadcast an arp as it has no idea what destination address information to add in the frame header. When it gets a reply, it can then unicast.

ddarwactor
07-25-2011, 07:03 PM
Got it, thanks, Fuzz!