Hi Jake,

On 04/08/16 14:19, Jake Snyder wrote:
> Slightly different test, Meraki SSID, with a MBA13 running 10.10.5.

Thanks for giving it a test.

> I did a packet capture on the AP filtered for arp and used wireshark on the 
> Mac with the same capture filter.  I'm only tracking arp requests, since 
> that's all I should see on the MBA.  100% arp requests sent OTA from the AP 
> were seen by the MBA.  But this is an older 11n MBA.  I'll get my hands on an 
> 11ac device tomorrow and rerun the test.

How many ARP requests were on the network? In one case in 75 seconds I
saw 598 on the 10.9.5 laptop, with the 10.11.5 laptop seeing 184.
Filtered with (arp.opcode==1) && (eth.addr==ff:ff:ff:ff:ff:ff).

Filtering just on eth.addr==ff:ff:ff:ff:ff:ff I see 1863 vs 564 packets,
roughly evenly split between NBNS, NetBIOS Browser and ARP requests with
a touch of Dropbox LAN Sync and BOOTP (DHCP). Extending it out to
eth.ig==1 (all broadcast/multicast traffic) it's 4353 vs 1310, with the
addition of mDNS and IPv6.

> Is it possible you are in promiscuous mode in Windows?  You shouldn't see the 
> arp responses for anything that client didn't send, or in responses to the 
> clients request unless promiscuous mode is enabled.  which then isn't a fair 
> test of what the laptop did or did not hear.

My baseline hardware was a 15" Mid-2012 rMBP running 10.9.5, which is
only 11n capable. When rebooted into 10.11 it also exhibits the problem.

Thanks,

-- 
James Andrewartha
Network & Projects Engineer
Christ Church Grammar School
Claremont, Western Australia
Ph. (08) 9442 1757
Mob. 0424 160 877

**********
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Reply via email to