One thing you might want to consider is sending the DHCP options to tell clients to not broadcast NetBIOS packets:
https://support.microsoft.com/en-us/kb/121005 We've been using the following options for years without problems: option netbios-node-type 2; option netbios-name-servers 0.0.0.0; Especially if you are going to filter the broadcasts anyway, you might as well have the clients not send them in the first place. On Thu, Aug 04, 2016 at 03:45:47PM +0800, James Andrewartha wrote: > Hi Jake, > > On 04/08/16 14:19, Jake Snyder wrote: > > Slightly different test, Meraki SSID, with a MBA13 running 10.10.5. > > Thanks for giving it a test. > > > I did a packet capture on the AP filtered for arp and used wireshark on the > > Mac with the same capture filter. I'm only tracking arp requests, since > > that's all I should see on the MBA. 100% arp requests sent OTA from the AP > > were seen by the MBA. But this is an older 11n MBA. I'll get my hands on > > an 11ac device tomorrow and rerun the test. > > How many ARP requests were on the network? In one case in 75 seconds I > saw 598 on the 10.9.5 laptop, with the 10.11.5 laptop seeing 184. > Filtered with (arp.opcode==1) && (eth.addr==ff:ff:ff:ff:ff:ff). > > Filtering just on eth.addr==ff:ff:ff:ff:ff:ff I see 1863 vs 564 packets, > roughly evenly split between NBNS, NetBIOS Browser and ARP requests with > a touch of Dropbox LAN Sync and BOOTP (DHCP). Extending it out to > eth.ig==1 (all broadcast/multicast traffic) it's 4353 vs 1310, with the > addition of mDNS and IPv6. > > > Is it possible you are in promiscuous mode in Windows? You shouldn't see > > the arp responses for anything that client didn't send, or in responses to > > the clients request unless promiscuous mode is enabled. which then isn't a > > fair test of what the laptop did or did not hear. > > My baseline hardware was a 15" Mid-2012 rMBP running 10.9.5, which is > only 11n capable. When rebooted into 10.11 it also exhibits the problem. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
