ARP spoofing has been a smooth operation for a long time, encountered countless times, and explained numerous times, yet it remains the biggest threat to enterprise network security and information security. Today, I'm starting a post to summarize the issue and attach some tools. Hopefully, this will be helpful to my peers in the industry.
First, let's address a few misconceptions:
Don't panic at the mention of ARP. ARP is a protocol; without it, computers within a local area network would be unable to communicate with each other.
ARP spoofing is a type of network attack phenomenon. Many times, it has nothing to do with viruses. To determine the root cause, you need to first locate the source of the packets before drawing any conclusions.