I'm playing around with wireshark and trying to learn how to see what is happening on my network via some packing sniffing.
I get an arp request from my router/switch asking for a response from a certain Local IP that does not exist.
I am sniffing packets for Pc's that are connected via 2 switches or rather one switch and the router/switch.
My understanding of ARP is the request is broadcast when something requests access to that IP. So, I guess, if the router is putting out that broadcast then the request is coming from the router and thusly from the internet..
So, I think that there is some process that is coming in off the internet that is asking to connect to that local IP.
If that is correct then what would be coming in from the WAN requesting a connection to a local PC? Especially one that does not exist.
Or am I looking at this all wrong?
Any comments appreciated!