Class Lab 3.1 ARP Observation - Zacham17/my-tech-journal GitHub Wiki

Summary

In this Lab, I used Wireshark to capture ARP requests and replies. This lab helped me understand more about arp requests and how they are performed and carried out.


Useful Commands/Instructions

  • The ipconfig command is useful for finding out information such as IP and MAC address
  • The ping command was useful in this lab for triggering an ARP request
  • The arp command was also useful.
    • arp -a: Shows the arp cache
    • arp -d: dumps the arp cache.
  • Wireshark was a useful tool in this lab as it captured the ARP request and reply in the lab.

Problems I Ran Into

  • I didn't run into any problems or issues during this lab.

Useful Information/Lab Specifics

  • To open an admin command prompt, you can search cmd in the search bar and then right click on the command prompt and select "Run as Administrator"
  • You can dump your arp cache by typing "arp -d" or "netsh interface ip delete arpcache" into the command prompt.
  • Wireshark is an overall useful tool for capturing packets that travel to and from your device. In this lab, I learned more about how much information Wireshark tells you from the packets is captures. I also found out how to change the colors of different protocols, to make it easier to find what you are looking for
  • To change colors in Wireshark, go to view>colorizing rules and then customize the colors to your needs.