ARP and RARP protocols are present at network layer. ARP is short form of address resolution protocol. IP is the type of header an ARP frame contain .
Unicast
ARP
mac
An ARP query is sent in a broadcast frame because the querying host does not know which adapter address corresponds to the IP address in question. For the response, the sending node knows the adapter address to which the response should be sent, so there is no need to send a broadcast frame (which would have to be processed by all the other nodes on the LAN).
no
Unicast
0X0800, 192.168.254.254
ARP
An ARP table.
space
mac
An ARP query is sent in a broadcast frame because the querying host does not know which adapter address corresponds to the IP address in question. For the response, the sending node knows the adapter address to which the response should be sent, so there is no need to send a broadcast frame (which would have to be processed by all the other nodes on the LAN).
You can find information about arp poisoning online at the Wikipedia. Once on the page, type "ARP spoofing" into the search field at the top of the page and press enter to bring up the information.
The node sends out an ARP request with the destination IP address.
inverse ARP
Etherlength, or the EtherType field in an Ethernet frame, serves to indicate the protocol encapsulated within the frame's payload. It helps the receiving device understand how to process the data contained in the frame, allowing for correct interpretation and handling by the appropriate layer of the networking stack. By specifying the type of protocol (e.g., IPv4, ARP, etc.), Etherlength facilitates interoperability between different network protocols.
Dynamic ARP table entries are created whne a client makes an ARP request that cannot be satisfied by data already in the ARP table.