It looks like an arp scan is being performed all the time…
One of my firewalls notoriously detects this traffic from the bridge as ARP spoofing.
High three-digit and sometimes even four-digit amounts during the 24. Nothing else behaves like this except ZBBridge-P.
ZBBridge-P 2.5.0
What is the presumed purpose of this behaviour?
I don’t know… I would also like to know why this Bridge has to do an arp scan every minute.
This is not typical behavior of most tcp/ip devices…
Indeed!
Maybe some sick way to maintain position in the ARP list where normally entries can disappear after 2-20m.