What is ARP?

The acronym ARP stands for Address Resolution Protocol.

It is communication protocol used to discovering the mac address associated with the given IP
address
ARP is defined in RFC 826.

IP Address MAC Address

ARP

Which layer of OSI Model, ARP belongs to?

The truth is that arp doesn’t fits in OSI model exactly but if you want to fit it layers of OSI then it
would be layer 2.5 (In Between Data Link layer and Network Layer).

Why ARP is important in Layer 2 communication?

Communication on the layer-2 or Data Link layer is always based on MAC Address not IP Address.
Let say we have 2 PC’s connected with the switch and they want to communicate.
So, if PC-1 have mac address of PC-2 in arp table then PC-1 able to communicate with PC-2 otherwise
PC-1 can’t be communicate with the PC-2.
So, ARP is protocol that maps ac address with the IP address.
Initially there is not entry in ARP table because there is no communication before.
You can see arp table in windows operating system by giving command “arp -a”

When PC-1 pings PC-2, arp request automatically generated.

ARP Request:

Source MAC Source IP Destination IP Destination MAC ARP message Type:

00:50:79:66:68:00 10.1.1.1 10.1.1.2 FF:FF:FF:FF:FF:FF ARP Request

I’m PC-1 having IP Address 10.1.1.1 and MAC address 00:50:79:66:68:00

Is there any device having IP address 10.1.1.2?
If there is a device having IP address 10.1.1.2 then send me your mac address.

ARP Request flooded broadcast message.

ARP Reply:

When PC-2 receives ARP request from PC-1:

Yes, I’m 10.1.1.2 and my MAC Address is 00:50:79:66:68:01
Whereas ARP Reply is unicast in network

PC-1:
OK PC-2, I will store your mac address in my arp table after that I will not ask mac
address from you till your entry is stable in my arp table.
Same as above for PC-2 arp table.
Header of ARP

Wireshark capturing of ARP Request:

Wireshark Capturing of ARP Reply: