Term
|
Definition
| Adress Resolution Protocol |
|
|
Term
|
Definition
The first computer first sends the IP address
Host OS sends request for MAC address (packet contains IP address)
A machine is expected to reply with the MAC address |
|
|
Term
| What happens when multiple answers are received when the host OS asks for the MAC address? |
|
Definition
| The host OS assumes that either there is a miscongifuraiton of the network or that there was an attempt to break in. |
|
|
Term
| What happens when the OS gets a reply from a different computer with the MAC adress? |
|
Definition
It keeps this IP+MAC pair for future reference.
-> It is okay to have multiple IP addresses for a given MAC address |
|
|
Term
| Does ARP appear on the internet at large? |
|
Definition
|
|
Term
| What is the goal of ARP poisoning? |
|
Definition
| The host OS has the incorrect value for the IP+MAC pair stored in the ARP table. |
|
|
Term
| What are some reasons that ARP poisoning is possible? |
|
Definition
| Either the computer that was meant to respond wasn't operational at the time the other computer responded or it sent its answer in too late. These are just a couple of examples. |
|
|
Term
| What are some of the points of ARP poisoning? |
|
Definition
Allows for a MiTM attack (which is usually a part of a larger attack)
Allows the traffic meant for P2 to be sent to P3 |
|
|
Term
| What are some ways that one could clean up ARP poisoning? |
|
Definition
1)The ARP table is reset on reboot.
2)Empty the ARP table |
|
|
