Lab 3‐1: ARP Observation Lab - devinziegler/Devin-Tech-Journal GitHub Wiki
Assignment: Arp Observation Lab
Objective: Observe Address Resolution Protocol operations and draw conclusions on how Layer 2 (MAC) and Layer 3 (IP) addresses interoperate
Goals:
- Understand how ARP is used between hosts on a LAN
- Recognize the basic flow of ARP
- Identify the role or broadcasts with arp
Helpful command:
Clear ARP cache on Kali:
ip neigh flush all
- A filter can be made in Wireshark for arp by typing
arp
in the filter box
How ARP works:
ARP in a local area network:
When a system on LAN wants to communicate with another system for the first time, an ARP request is sent out. The request will ask what system has the target IP address. The target system will then respond to the request with their MAC address.
ARP outside of Local Area Network:
Because ARP operates in the data link layer, the protocol can not cross routers. When looking for a system outside of LAN, a decision is made at the very start and the target IP in the ARP request will be the default gateway. Once the gateway has been determined, the system inside of the LAN can send IP traffic to the default gateway and the router can then route that traffic where it needs to go outside of the network.