How do I track a ARP flood

I have about 40 new 2003 servers, and roughly 5 old NT 4.0 servers still on the network. One of the old NT servers uses some proprietary software, anyways everyonce and awhile the machine gets flooded by ARP requests which causes the proprietary service to stop functioning. I have noticed no ill effects on any other machines, but could just be missing it. How can I trap these ARP requests and find out where they are originating?

Any help would be much appreciated

Thanks so much

Chris


=?Utf-8?B?Q2hyaXMgSGFsdmVyc29u?=

(assuming) your server farm is on a switch, consider mirroring the servers
to a single port and then use something like sniffer (www.sniffer.com) to
trap it.
al
"Chris Halverson" <(E-Mail Removed)> wrote in message
news:CDB9F23A-8488-455D-AC02-(E-Mail Removed)...
> I have about 40 new 2003 servers, and roughly 5 old NT 4.0 servers still
on the network. One of the old NT servers uses some proprietary software,
anyways everyonce and awhile the machine gets flooded by ARP requests which
causes the proprietary service to stop functioning. I have noticed no ill
effects on any other machines, but could just be missing it. How can I trap
these ARP requests and find out where they are originating?
>
> Any help would be much appreciated
>
> Thanks so much
>
> Chris