In wireshark, after capturing some arp packets, what is the significance of all 1's in the destination field. of an Ethernet II frame?
Wireshark arp packets
arpnetworkingwireshark
Related Topic
- Why ARP request is unicast
- Can WireShark detect Ethernet PAUSE packets on network when running on Windows
- Configure wireshark to automatically save captured packets every X hours
- Wireshark running on a server seeing lots of `ARP who has` with different tells
- Strange Ethernet II packets in wireshark
- How to capture network packets that use SS7 protocol using Wireshark
Best Answer
ARP request packets are sent to the ethernet broadcast address FF:FF:FF:FF:FF:FF (or all 1s if you're looking at in binary). This will flood the packet throughout the network so that the correct device will hear it and respond with its IP address.
http://en.wikipedia.org/wiki/Address_Resolution_Protocol