
104 ◾ Network Attacks and Defenses: A Hands-on Approach
4.2.7.2 Step 2: Run Host B’s NIC in Promiscuous Mode
Install CommView sniffer (or any available sniffer tool) at Host
B so that its NIC runs in promiscuous mode.
4.2.7.3 Step 3: Generate Trap ARP Request Packets
From Host A, tests are conducted to identify whether or not
Host B’s NIC is running in promiscuous mode. Hence, Host
A will proceed to send a number of trap ARP request packets
to Host B, using the fake broadcast MAC addresses Br47 and
Br16, and the multicast MAC addresses M0, M2, and M3. The
trap ARP request packets will look as follows:
ARP Header
Operation code 1 (for ARP request) ...