D-Link DWS-3160-24TC Cli Reference Manual page 944

DWS-3160 Series Gigabit Ethernet Unified Switch CLI Reference Guide
Table 3. ARP Payload
When PC B replies to the query, the "Destination Address" in the Ethernet frame will be changed
to PC A's MAC address. The "Source Address" will be changed to PC B's MAC address (see
Table 4).
Table 4. Ethernet Frame Format
The Switch will also examine the "Source Address" of the Ethernet frame and find that the address
is not in the Forwarding Table. The Switch will learn PC B's MAC and update its Forwarding Table.
How ARP Spoofing Attacks a Network
ARP spoofing, also known as ARP poisoning, is a method to attack an Ethernet network which
may allow an attacker to sniff data frames on a LAN, modify the traffic, or stop the traffic altogether
(known as a Denial of Service – DoS attack). The principle of ARP spoofing is to send the fake, or
spoofed ARP messages to an Ethernet network.
940