Our router has 3 ethernet interfaces, two connected to ADSLs (the WANs) and one connected to our internal LAN. It is running in bridge mode. On the LAN interface there are 9 public subnets (our public IP addresses are little chunks all over the place).
The entire LAN is wireless using Karlnet software in bridge mode. There are about 30 CPE’s all together.
For some reason there is a huge number of ARP requests being generated by the Mikrotik router itself. It seems to be stepping down through all of the possible IP addresses on the LAN interface and sending out an ARP request for each one whether or not that address is in use. It does this over and over again. It is the main source of traffic on the network !!
HELP ?
It is probably someone scanning your network. There are filter rules in v2.9 that will prevent this.
John
If that were true wouldn’t I see it on the WAN interfaces ? The traffic on these interfaces seems Normal ?
You can send your supout file to support@mikrotik.com and then they can check if it is a configuration issue.
John
Yep, I did that a few days ago. No reply yet. But thanks very much for your suggestion. It may yet turn out to be true 'cause I’m not sure I did the packet capture correctly on the WAN interface.
Dave