Re: [Ethereal-users] arp packet shows odd info

[Guy Harris <gharris@xxxxxxxxx>]

On Fri, Feb 07, 2003 at 07:10:57PM -1000, John Covey wrote:
> Was wondering why ethereal shows a FQDN in my arp packets. This FDQN
> shows up in parentheses beside the destination mac address field of the
> packet.

Probably because it was either able to resolve the IP address in that
ARP packet corresponding to that MAC address or it saw, in the capture,
a DNS packet giving the name for that IP address.

> These arp requests show that they are for hosts on the local
> subnet looking for an unknown mac (of course) and this mysterious FDQN
> is on another network elsewhere in my infrastructure. This shows up in
> all arp requests. 

Did the MAC address in the ARP packet have an IP address going along
with it - e.g., was it an ARP reply giving the MAC address for that IP
address?  Is the FQDN the name for that IP address (or *a* name for that
IP address)?