Analyzing the process of ARP address resolution with Cisco Packet Tracer
Use tool: Cisco Packet Tracer 6.1 (Cisco Packet Tracer2018 is more convenient to use)
Related links: Use wireshark to analyze the ARP protocol:
- Set up the experiment network according to the experiment topology and set the IP of the host
- Obtain the MAC address of the host and mark it under the corresponding host
- Use the arp -d command in the cmd of host 1 to clear the arp information on the host
- Before starting the experiment, confirm whether the IP addresses of the two hosts are set up (an important step is to ensure that there is no problem with the IP addresses of the two hosts). Turn on the emulation mode of Cisco software, it will capture the connection between the hosts. .
-
Use the next button in the experiment to get the next step of the connection process.
-
Open the cmd tool of host 1. Ping the IP of host 2.
-
Effect after running
- Click the color block behind the ARP type connection of the connection event to view the connection details
- Because the MAC address of the target host is unknown, using the broadcasted MAC address FFFF.FFFF.FFFF, the router will forward the packet to all hosts in the LAN after receiving the packet.
Click the corresponding data item of the ARP packet and then the mouse wheel slides down, you can view the information
-
The target MAC (TARGET MAC) address in the ARP broadcast packet is unknown, so it is filled with 00.00.00.00.00.00.
-
The message format corresponding to the arp protocol
- After that, you can click the next step of the simulation tool to obtain the ARP connection that occurs in the next step. Click the corresponding connection to analyze the parameters in the ARP packet. And compared with the pre-marked address information of host 1 and host 2 to analyze and interpret the ARP message.
ICMP type connection is the connection type generated when running the ping command
Finish
