1.

Source MAC Address: 00:d0:59:a9:3d:68

2. Destination MAC 00:06:25:da:af:73, This not the gaia.cs.umass.edu, it comes from sample files
from the Linksys router.

3. 0x0800

4. 52 bytes from the very start of the frame.

5.
Source address is 00:06:25:da:af:73

6. Destination Address is 00:06:25:da:af:73, it would appear to be the IP of the computer in the

sample trace.

7. 0X800, Network Layer.

8. 52 bytes from the start of the Ethernet frame.

9. Internet Address, Physical Address, Type.

10.
Source00:d0:59:a9:3d:68, Destination ff:ff:ff:ff:ff:ff
11. 0x0806 Refers to Link Layer
12.
a. 20 bytes
b. 0x0001
c. 192.168.1.105
d. Target MAC Address 00:00:00:00:00:00
13.
a. 20 bytes
b. 2
c. 192.168.1.1

14.
Source 00:06:25:da:af:73
Destination: 00:d0:59:a9:3d:68
15. The initial request did not come from us thats there is no arp reply.

EX:1 If an IP is mapped to the wrong MAC address the there will be no exchange of data.

EX: 2 According to http://support.microsoft.com/kb/949589, the ARP cache will be removed after

the Reachable time Value has been met. Once this time has been met it will be removed from the
ARP cache.