Want this question answered?
ARP Spoofing
Address Resolution Protocol (ARP) spoofing, also known as ARP poisoning or ARP Poison Routing (APR), is a technique used to attack an Ethernet http://wiki.answers.com/wiki/Ethernet or http://wiki.answers.com/wiki/Wireless_network. ARP Spoofing may allow an attacker to http://wiki.answers.com/wiki/Packet_sniffer http://wiki.answers.com/wiki/Data_frame on a http://wiki.answers.com/wiki/Local_area_network (LAN), modify the traffic, or stop the traffic altogether (known as a http://wiki.answers.com/wiki/Denial-of-service_attack). The attack can only be used on networks that actually make use of ARP and not another method of address resolution.
To make ARP more efficient computers save recognized mac to IP address mappings on their hard disks in a database known as ARP cache. ARP is an network layer protocol / third layer protocol. ARP provides mapping between Logical to physical address.
an arp (address resolution protocol) comes into picture when we have the ip address of our destination but we dont know the mac address of our destination.Normally when we open a web site this is the process which takes place.IP packet transmission comes after arp when the destination mac address is obtained after arp request.so an ip packet contains both source & destination IP & mac addr.
mac
The purpose of an arp request is to map an IP address to a MAC address for the link layer to transmit a packet. For example, ARP will get a request to map 1.2.3.4 to a MAC address 12:fd:23:gf .Then ARP will cache the address mapping that next time an arp request doesnt need to happen
Address Resolution Protocol (ARP)ARP is primarily used to translate IP Addresses to Ethernet MAC Addresses.
It's a response to a broadcast asking for the devices MAC ID. Routers and switches keep a table known as an ARP table which lists all the MAC ID's in the local area network. It will send ARP requests out to all the nodes in it's broadcast domain saying send me your MAC ID's. All the nodes in the network reply back with an ARP reply saying here is my MAC ID.
That the MAC addresses have expired
Usually you don't need the MAC address directly - except perhaps to improve the documentation in a large network.If you know a device's IP address, you can do a pingcommand; before and after, compare the ARP cache - the one that shows assignments of IP addresses to MAC addresses. In Windows, the steps would be more or less like this:Open a command window arp -d * (this will delete the ARP cache)arp -a (this will show the ARP cache)ping ... (this will connect to the IP address you specify)arp -a (show the ARP cache again. Compare with the previous one.)Usually you don't need the MAC address directly - except perhaps to improve the documentation in a large network. If you know a device's IP address, you can do a pingcommand; before and after, compare the ARP cache - the one that shows assignments of IP addresses to MAC addresses. In Windows, the steps would be more or less like this:Open a command windowarp -d * (this will delete the ARP cache)arp -a (this will show the ARP cache)ping ... (this will connect to the IP address you specify)arp -a (show the ARP cache again. Compare with the previous one.)Usually you don't need the MAC address directly - except perhaps to improve the documentation in a large network. If you know a device's IP address, you can do a pingcommand; before and after, compare the ARP cache - the one that shows assignments of IP addresses to MAC addresses. In Windows, the steps would be more or less like this:Open a command windowarp -d * (this will delete the ARP cache)arp -a (this will show the ARP cache)ping ... (this will connect to the IP address you specify)arp -a (show the ARP cache again. Compare with the previous one.)Usually you don't need the MAC address directly - except perhaps to improve the documentation in a large network. If you know a device's IP address, you can do a pingcommand; before and after, compare the ARP cache - the one that shows assignments of IP addresses to MAC addresses. In Windows, the steps would be more or less like this:Open a command windowarp -d * (this will delete the ARP cache)arp -a (this will show the ARP cache)ping ... (this will connect to the IP address you specify)arp -a (show the ARP cache again. Compare with the previous one.)
It resolves an IP address to a MAC address.
The primary purpose of the Address Resolution Protocol (ARP) is to map an IP address to a MAC address in a local network. This allows devices on a network to communicate with each other using their unique MAC addresses. ARP is crucial for proper functioning of Ethernet-based networks.