USG Flex 700 - ARP packet capture
We received a query from our ISP that it is receiving a huge number of ARP requests from our USG.
To check this, we've activated the packet capture on WAN1 port, but received only a few ARP requests originated from different ISP IP addresses.
My question is, does the USG captured also its own outgoing packets or only incoming packets on WAN interface? If it captures only incoming traffic, we have to put an own notebook between USG port and ISP port in order to capture the entire ARP request and respond traffic.
Accepted Solution
-
The capture packet sees all ARP from the USG
Its possible someone else on the ISP network is sending spoofing ARP for your/of your IP
0
All Replies
-
The capture packet sees all ARP from the USG
Its possible someone else on the ISP network is sending spoofing ARP for your/of your IP
0 -
Thanks Peter,
In the meantime our ISP has not longer follow that issue. It seems that the problem is gone.
However, nice to know that the USG is able to capture also its own outgoing packets. This is not clearly described in the manual (or I was too blind to find it 😎)
Greetings from Germany
0
Categories
- All Categories
- 415 Beta Program
- 2.4K Nebula
- 148 Nebula Ideas
- 96 Nebula Status and Incidents
- 5.7K Security
- 262 USG FLEX H Series
- 271 Security Ideas
- 1.4K Switch
- 74 Switch Ideas
- 1.1K Wireless
- 40 Wireless Ideas
- 6.4K Consumer Product
- 249 Service & License
- 387 News and Release
- 84 Security Advisories
- 29 Education Center
- 10 [Campaign] Zyxel Network Detective
- 3.5K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 85 About Community
- 73 Security Highlight