Is the amount of ARP traffic I'm receiving normal on Cable Broadband?
27-09-202016:43 - edited 27-09-202016:52
I was using tcpdump to debug something earlier on my router and noticed my WAN is getting a lot of ARP request traffic, reading into a bit, it suggests this is common on Cable Broadband by design, but after writing the ARP request traffic to a log file, I'm receiving around 80/90 ARP requests per second from VM's network.
This is what the traffic looks like, I have masked the rDNS as they will be VM customers
If the rDNS wasn't obvious, it looks like it is coming from the cable modem side, as the MAC address identifies as Cadant when viewing Wireshark, which is related to Arris, which I'm sure a lot of us know, is the vendor for the Hub3, but this appears to be the CMTS in VM's network.
Is this normal? The amount of ARP traffic seems a lot, but it does seem to be something that tends to be the case with cable broadband by the looks of it when reading a few resources.