Reversing ARP

The opposite of ARP is RARP. With RARP, a client requests its IPv4 address from a computer network by using its MAC address.

Using an example found at https://wiki.wireshark.org/SampleCaptures?action=AttachFile&do=view&target=rarp_request.cap, we can see the host requesting its IP address, as shown in the following screenshot:

RARP

The sender's MAC address is 00:00:a1:12:dd:88. The IP address is unknown, so it is listed as 0.0.0.0. The opcode is reverse request (3). RARP is an obsolete protocol that has been replaced by more efficient protocols such as the Dynamic Host Configuration Protocol (DHCP).

Next, let's look at a lesser-known type of ARP called the Inverse Address Resolution Protocol (InARP).

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
18.119.131.178