the data that field of the frame contains an arp request packet
What is the destination MAC address of this frame? and what is the source that the mac address use to frame?
aa aa aa aa aa aa aa ab ff ff ff ff ff ff 00 d0
2b 75 3d 8c 08 06 00 01 08 00 06 04 00 01 00 d0
2b 75 3d 8c 52 2d 78 01 00 00 00 00 00 00 52 2d
79 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Software/Hardware used:
Software/Hardware used:
ASKED:
November 22, 2007 1:19 PM
UPDATED:
October 28, 2008 12:24 PM
Answer Wiki:
Ho ho... Whenever in doubt, download Colasoft's Packet Builder, and toss those HEX values into a fresh packet. It'll show you all the information you need, right down to a tee.
Mind you, just at first glance...
Sender Mac Address: FF FF FF FF FF FF
Destination Mac Address: 00 D0 2B 75 3D 8C
And then the listed Sender/Dest Mac Addr placed in the next portion is:
Sender Mac Address: 00 D0 2B 75 3D 8C
Destination Mac Address: 00 00 00 00 00 00
Hope this answers your question.
==================
The broadcast MAC address will never be the source address on any IP traffic. This is malicious traffic if the source is broadcast. The destination address for ARP requests will be all 00's as shown above.
This does not look like a valid ARP request packet. A valid ARP request would start out with
00 01 08 00 06 04 00 01
See these references for ARP packets
<a href="http://en.wikipedia.org/wiki/Address_Resolution_Protocol">Wikipedia</a>
<a href="http://www.tcpipguide.com/free/t_ARPMessageFormat.htm">TCP-IP Guide</a>
To see all answers submitted to the Answer Wiki: View Answer History.
RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
