Arp poisoning
ARP allows the network to translate IP addresses into MAC addresses. When one host using
TCP/IP on a LAN tries to contact another, it needs the MAC address or hardware address
of the host it’s trying to reach. It first looks in its ARP cache to see if it already has the MAC
address; if it doesn’t, it broadcasts an ARP request asking, “Who has the IP address I’m
looking for?” If the host that has that IP address hears the ARP query, it responds with its
own MAC address, and a conversation can begin using TCP/IP.
No comments:
Post a Comment