Question

Inspect the ARP_Poison.pcapng file, part of this module's resources, and submit the total count of ARP requests (opcode 1) that originated from the address 08:00:27:53:0c:ba as your answer.

• To filter ARP packets (packet type) and then specify ARP requests (opcode 1) originating from the address 08:00:27:53:0c:ba, you can use the following filter:

arp.opcode == 1 && arp.src.hw_mac == 08:00:27:53:0c:ba

• arp.opcode == 1: This filters only ARP packets that are requests (opcode 1).

• arp.src.hw_mac == 08:00:27:53:0c:ba: This filters only ARP packets whose origin (MAC address) is 08:00:27:53:0c:ba.