ARP & ARP SPOOFING
DEMONSTRATED by
Mahzabin Binte
Mustafiz
WHAT is “ARP”
• ARP stands for Address Resolution Protocol
• It translates IP addresses into Ethernet or
MAC addresses
• ARP is completely separate from TCP/IP,
since it
uses only the Ethernet frame in its packets
What are the uses of
ARP
To communicate between two
Ethernet network
To get the Ethernet address of
host
It is used in any type of
broadcast network
It is extensively used by
Ethernet network
ARP Request Packet
MAC address A46EF459683AB
address of source (PC0) 142.50.1.1
address of destination 142.50.1.2
ARP Reply Packet
MAC address A46EF459683AB
IP address of destination (PC3) 142.50.1.2
What is ARP Spoofing
Familiar with the name of “ARP
poisoning”
It is one of the hacking methods
A technique for attacking an
Ethernet
wired or wireless network
To allows an attacker to sniff data
frames
on LAN (local area network)
CONCLUSION
References
2. http://www.nextsecurity.net/
3. http://winpcap.polito.it/
http://www.ietf.org/rfc/rfc0826.txt
http://www.wikipedia.com