This would probably be easier if you posted the details of the four packets.
-- Murphy On Jun 23, 2015, at 6:54 PM, Talal Alharbi <tal...@hotmail.com> wrote: > Dear All, > > Running a test on L2_learning module and trying to send an ARP packet from a > host using Scapy. After sending an ARP request from host#1 to host#2, I > checked Wireshark and I have found 4 packets: > > 1- Broadcast ARP request > 2- Unicast ARP reply > 3- Unicast ARP request > 4- Unicast ARP reply > > Why do I have the third packet? Who is sending it ? I used scapy command: > arp = ARP(op=1, psrc=host1, pdst=host2, hwdst= mac address of host2) > Cheers, > Talal
