In contrast to the VMware Tools report, DHCP and/or ARP snooping is performed under the kernel space as opposed to the user space.
In ARP snooping, NSX keeps two ARP IP addresses: Trust on First Use (TOFU) ARP IP and LAST SEEN IP. ARP snooping tracks the ARP request so if there is no traffic or no ARP request, the IP address will not be learnt. There will be only one IPv4 and IPv6 entry per vNIC that is maintained, and ARP entries are not timed out.
DHCP snooping tracks DHCP protocol messages, particularly DHCP client requests. If the guest virtual machine receives an IP address from the DHCP server prior to enabling DHCP snooping, NSX Manager will still not be aware of the IP address as no DHCP client request would have been ...
