Exercise 3(A). A simple experiment with ARP 1. On PC1, view the ARP cache with arp -a and delete all entries with the -d option. Start Wireshark on...

Exercise 3(A). A simple experiment with ARP

1. On PC1, view the ARP cache with arp -a and delete all entries with the -d option.

2. Start Wireshark on PC1-Hub1 link.

3. Issue a ping command from PC1 to PC2:

Observe the ARP packets in the Wireshark window. Explore the MAC addresses in the Ethernet headers of the captured packets. Direct your attention to the following fields:

• The destination MAC address of the ARP Request packets.

• The Type Field in the Ethernet headers of ARP packets and ICMP messages.

4. View the ARP cache again with the command arp -a. Note that ARP cache entries can get refreshed/deleted fairly quickly (~2 minutes).

5. Save the results of Wireshark. You will use your Wireshark output to answer the questions below.

Lab Questions

• What is the destination MAC address of an ARP Request packet?

• What are the different Type Field values in the Ethernet headers that you observed?

• Use the captured data to analyze the process by which ARP acquires the MAC address for IP address 10.0.1.12.