In the figure above the value of Opcode is 2 which means its an ARP Response.

Opcode - When its value is 2 it means its an ARP Response and when it is 1 it means its an ARP Request.

Out of all the fields, the most important ones for us are: There are several fields inside of it using which it communicates with other devices in the network.

displays an ARP Response packet captured in Wireshark. If it is still not clear what ARP is and how it works then refer to the images below.įig 6. After receiving the broadcast message, the device with the IP address equal to the IP address in the message will send an ARP Response containing its MAC Adress to the sender.

This request is broadcasted meaning every device in the network will receive this but only the device with the intended IP address will respond. The sending device sends an ARP Request containing the IP Address of the device it wants to communicate with.ARP involves two steps to find the MAC address: For instance, a device wants to communicate with the other device on the network, then the sending device uses ARP to find the MAC Address of the device that it wants to communicate with. ARP is used to find out the MAC Address of a particular device whose IP address is known. In a network, computers use the IP Address to communicate with other devices, however, in reality, the communication happens over the MAC Address. What is Address Resolution Protocol (ARP)?

Kali linux show mac address table count