# Question

Inspect the ARP\_Poison.pcapng file, part of this module's resources, and submit the first MAC address that was linked with the IP 192.168.10.1 as your answer.

* Open `ARP_Poison.pcapng` in Wireshark.
* Use this display filter to show ARP packets where `192.168.10.1` appears as the protocol (IP) address in the ARP packet:

```
arp.opcode == 2 && arp.src.proto_ipv4 == 192.168.10.1
```