I am learning more about networking... I am working on some Wireshark Labs and the subject is ARP. Screen shot of ARP Cache Windows Command ARP During the lab I did an ARP Cache dump. Fired up Wireshark and went to a page. I looked again in my ARP cache. I get why that I see my router and other devices (IPs with 192.168.0.XXX). I just don't know where 224.0.0.XXX or IP addresses are coming from. I get that the address is my subnet(?), but the others?

Thanks in advance.


That's multicast address space:

The multicast addresses are in the range through Address assignments are listed below.

The range of addresses between and, inclusive,
is reserved for the use of routing protocols and other low-level
topology discovery or maintenance protocols, such as gateway discovery
and group membership reporting.  Multicast routers should not forward
any multicast datagram with destination addresses in this range,
regardless of its TTL.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.