If Wireshark is already installed on your PC, you can skip Part 1 and go directly to Part 2.

This open-source software is available for many different operating systems, including Windows, Mac, and Linux. Wireshark has become the industry standard packet-sniffer program used by network engineers. Instructions Part 1: Download and Install Wireshark If no additional PCs are on the LAN, the default gateway address will be used to reply to the ping requests.

Additional PC(s) on a local-area network (LAN) will be used to reply to ping requests.

In this lab, you will use Wireshark to capture ARP exchanges on the local network. This lab provides instructions for downloading and installing Wireshark, although it may already be installed. Wireshark is a useful tool for anyone working with networks and can be used with most labs in the Cisco courses for data analysis and troubleshooting. As data streams travel back and forth over the network, the sniffer “captures” each protocol data unit (PDU) and can decode and analyze its content according to the appropriate protocol specifications. Wireshark is a software protocol analyzer, or “packet sniffer” application, used for network troubleshooting, analysis, software and protocol development, and education. Viewing an ARP cache on a PC displays the IPv4 address and the MAC address of each device on the LAN with which the PC has exchanged ARP messages. The ARP cache is a small area in RAM that holds the ARP responses.

The device that is configured with the destination IPv4 address responds to the request with an ARP reply and the MAC address is recorded in the ARP cache.Įvery device on the LAN maintains its own ARP cache. To dynamically discover the MAC address of a known destination, the source device broadcasts an ARP request on the local network. When an Ethernet frame is transmitted on the network, it must have a destination MAC address. Background / ScenarioĪddress Resolution Protocol (ARP) is used by TCP/IP to map a Layer 3 IPv4 address to a Layer 2 MAC address. = Use the Windows arp command to view the local ARP table cache on the PC. Part 3: View the ARP cache entries on the PC = Analyze the content of the ARP messages exchanged between devices on the LAN. = Locate the IPv4 and MAC address information in captured PDUs. = Start and stop data capture of ping traffic to remote hosts. Part 2: Capture and Analyze ARP Data in Wireshark My project was to capture traffic from WireShark and below are the steps I followed: Objectives With that said, let's jump into it straight. Fyi, this is my first tech blog - pardon me if I attempt any mistakes/void statements.

How to install wireshark on windows 10