
80 ◾ Network Attacks and Defenses: A Hands-on Approach
◾ Packet #4: Host A sends the following abnormal ARP reply
packet. The packet contains invalid destination IP address
(255.255.255.255) in the ARP header, as shown below:
ARP Header
Operation code 2 (for ARP reply)
Source IP address IP address of Host A
Source MAC address MAC address of Host A
Destination IP address 255.255.255.255
Destination MAC address MAC address of Host C
Ethernet Header
Source MAC address MAC address of Host A
Destination MAC address MAC address of Host C
Ethernet Type 0x0806 for ARP message
The switch uses the ARP ACL to test only the validity of
the source IP and M