Questions about this topic? Sign up to ask in the talk tab.

Difference between revisions of "ARP poisoning"

From NetSec
Jump to: navigation, search
(No difference)

Revision as of 01:06, 17 December 2010

Description

ARP poisoning is an MITM attack that attempts to change the arp table, which holds records of IP addresses and their assigned MAC address. If these records can be modified, devices will send traffic on a LAN to the MAC address for the host of the assigned IP address. This allows an attacker to impersonate computers and gateways, and can result in sniffing a vast majority of network traffic. Depending on the sniffer's throughput, this may also cause substantial packet loss if successful.

Tools