subject: What Is ARP Spoofing (FAQ of ARP Simulation 7)? [print this page] 1. What is ARP spoofing?1. What is ARP spoofing?
Answer: A node attacker sends ARP reply to the victim of a false identity and corrupts the ARP cache of the victim. Next time, when the victim wants to send data to other nodes, the packets are received by the attacker node. The attacker can then copy or edit data and packages before the target nodes.
2. How ARP spoofing work?
Answer: It takes several steps. The key is attacker to send an ARP reply with false identity.
1) In a 3-LAN node, the node A wants to send packets to node B, but do not know MAC B. A sends a broadcast ARP request to find MAC B.
2) The attacker node C receives and stores an ARP request (IP, MAC) in its ARP cache.
3) When B wants to send a packet to A, it first sends a broadcast ARP request to find MAC A.
4) The attacker receives the ARP request and stores B (IP, MAC) in its ARP cache.
5) Now, the attacker knows both A and B addresses. It sends an ARP reply to B with false identities: Source is IP_A IP, Source MAC MAC_C. C is that B: I am, my MAC is MAC_C.
6) B trusts ARP response it has received and changes in its entry in the ARP cache (IP_A, MAC_A) to (IP_A, MAC_C).
7) When B wants to send packets to A, it encapsulates the packet.
A. Use IP_A the destination address of the network.
B. Use MAC_C for its link destination MAC.
Consequently, the packet is received by C, not A.
8) When the attacker receives packets, it can store data, then send to, or edit the data before transmitting to A. This change is transparent for A and B. They are not aware of what has been done by the attacker.
3. Why ARP Spoofing?
Answer: There is an advantage to learn or modify the data of others. For example, military spies, financial operations. ARP is more or less successful protocol used in local area network, a broadcast medium. It is almost certain that someone can understand how to use AR to spoil the data ..
This article is part of the FAQ interactive simulation. To play this interactive simulation, click on external links below.
