> > > The received packets captured on the PC are MDNS and DHPC, these MDNS > > > are causing the rx > > > packet counter go up: > > > > And where are these packets coming from? The target device? Or some > > other device on your network? > > > AFIK, MDNS is also kind of a bcast its sending MDNS requests and > receiving itself, > that’s the reason rx packets are incrementing (correct me if I am wrong)
Your Ethernet device should not be receiving its own transmissions. Looping back for broadcast and multicast packets happens higher up in the network stack. Look at the source MAC address for these packets. Where are the coming from? > ~$ ethtool -S lan4 > NIC statistics: ... > tx_hi: 0 > tx_late_col: 0 > tx_pause: 0 > tx_bcast: 749 > tx_mcast: 212 This suggest the switch is putting packets onto the wire. > Only weird thing I notice on target, when its replying for ping > requests ( (oui Unknown) is that something which is causing issues ? These are not ping requests. These are ARP requests/replies. > 08:11:20.230704 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has > VB4-SN00000000 tell tango-charlie.local, length 46 > 08:11:20.230749 ARP, Ethernet (len 6), IPv4 (len 4), Reply > VB4-SN00000000 is-at c4:f3:12:08:fe:7f (oui Unknown), length 28 > 08:11:21.230629 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has > VB4-SN00000000 tell tango-charlie.local, length 46 > 08:11:21.230657 ARP, Ethernet (len 6), IPv4 (len 4), Reply > VB4-SN00000000 is-at c4:f3:12:08:fe:7f (oui Unknown), length 28 > 08:11:22.247831 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has > VB4-SN00000000 tell tango-charlie.local, length 46 > 08:11:22.247857 ARP, Ethernet (len 6), IPv4 (len 4), Reply > VB4-SN00000000 is-at c4:f3:12:08:fe:7f (oui Unknown), length 28 c4:f3:12 is the OUI. It is actually registers to TI: https://aruljohn.com/mac/C4F312 But tcpdump probably does not know this, or the build you have has the oui table removed to keep the binary small. Andrew
