Class Lab 3.1 ARP Observation - Zacham17/my-tech-journal GitHub Wiki
Summary
In this Lab, I used Wireshark to capture ARP requests and replies. This lab helped me understand more about arp requests and how they are performed and carried out.
Useful Commands/Instructions
- The ipconfig command is useful for finding out information such as IP and MAC address
- The ping command was useful in this lab for triggering an ARP request
- The arp command was also useful.
- arp -a: Shows the arp cache
- arp -d: dumps the arp cache.
- Wireshark was a useful tool in this lab as it captured the ARP request and reply in the lab.
Problems I Ran Into
- I didn't run into any problems or issues during this lab.
Useful Information/Lab Specifics
- To open an admin command prompt, you can search cmd in the search bar and then right click on the command prompt and select "Run as Administrator"
- You can dump your arp cache by typing "arp -d" or "netsh interface ip delete arpcache" into the command prompt.
- Wireshark is an overall useful tool for capturing packets that travel to and from your device. In this lab, I learned more about how much information Wireshark tells you from the packets is captures. I also found out how to change the colors of different protocols, to make it easier to find what you are looking for
- To change colors in Wireshark, go to view>colorizing rules and then customize the colors to your needs.