I don't understand why the ARP request is a unicast instead of broadcast.
Normaly, when I clear the ARP cache on my Cisco routeur 7206 then an ARP request is sent from routeur to Web http , identifiable by the destination Ethernet address with all bits set (ff:ff:ff:ff:ff:ff).
Host Web -----> INTERNET ----------> Router (91.213.T.V) ---------> Switch ------------> (91.213.X.Y) hw: 0026.643a.f463 WEB HTTP
r01#show ip arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 91.213.X.Y 0 0026.643a.f463 ARPA FastEthernet4/0.11
I clean the entry of arp table on my router :
r01#clear arp-cache 91.213.X.Y
r01#clear ip arp 91.213.X.Y
5w4d: IP ARP: arp_process_request: 91.213.X.Y, hw: 0026.643a.f463; rc: 3
5w4d: IP ARP: rcvd rep src 91.213.X.Y 0026.643a.f463, dst 91.213.T.V FastEthernet4/0.11
Wireshark trace on my http server :
27112.184599 Cisco_41:98:70 -> 00:26:64:3a:f4:63 ARP Who has 91.213.X.Y? Tell 91.213.T.V
27112.184608 00:26:64:3a:f4:63 -> Cisco_41:98:70 ARP 91.213.X.Y is at 00:26:64:3a:f4:63
Why have we got this MAC hw: 0026.643a.f463 in ARP request ? It is unicast
Normaly, we must have hw : ffff.ffff.ffff.ffff in ARP request.