我设置了一些设备,我注意到这在我的新旧路由器上都发生了(两个不同的供应商和型号)
这种情况偶尔会发生,今天我尝试了 wireshark,这引起了我的注意:
No. Time Source Destination Protocol Length Info
69 6.464423000 LiteonTe_7f:64:30 Broadcast ARP 42 Who has 192.168.2.4? Tell 0.0.0.0
73 7.451146000 LiteonTe_59:65:94 Arcadyan_e1:8c:cf ARP 42 Who has 192.168.2.254? Tell 192.168.2.1
85 9.450443000 LiteonTe_59:65:94 Arcadyan_e1:8c:cf ARP 42 Who has 192.168.2.254? Tell 192.168.2.1
91 10.521000000 LiteonTe_59:65:94 Broadcast ARP 42 Who has 192.168.2.254? Tell 192.168.2.1
93 10.860953000 LiteonTe_7f:64:30 Broadcast ARP 42 Who has 192.168.2.254? Tell 192.168.2.4
97 11.099463000 LiteonTe_7f:64:30 Broadcast ARP 42 Who has 192.168.2.254? Tell 192.168.2.4
其中 192.168.2.254 是网关/路由器,192.168.2.1 是我的笔记本电脑的 IP,而 192.168.2.4 是我姐妹的笔记本电脑的 IP。这里发生了什么?
答案1
它的 ARP 流量,看起来 192.168.2.1 和 192.168.2.4 正在寻找网关。您应该看到对这些查询的 ARP 响应,其中说明哪个设备有 192.168.2.254。类似于“ARP 回复 192.168.2.254 位于”
从 TCPdump 来看:
14:10:26.907259 ARP, Request who-has 10.7.148.1 tell 10.7.149.249, length 46
14:10:27.043117 ARP, Reply 10.7.148.1 is-at 78:2b:cb:38:3e:49 (oui Unknown), length 46
您根本看不到回复,这意味着网关没有正确响应,或者请求没有到达网关。