PacketScope protocol analyzer · lab build

Read the conversation a host has before it can talk: capture live traffic, isolate ARP, and prove which hardware address answers for a server's IP.

N10-009 · 1.1 N10-009 · 5.5 AP NET · 2.2.A AP NET · 2.2.B
Your shift. You're Mara Quill, first week on the bench at Arcline Logistics. A new ledger server, svc-ledger (10.42.7.58), just went live on the 10.42.7.0/24 office VLAN. Before the app team blames the network, you want proof the server is reachable at Layer 2 — that some real NIC actually answers for that IP. A port mirror feeds a copy of the segment's traffic to your monitoring interface lan-mon0. Capture it and let the packets tell you the MAC.
iface lan-mon0 ~5 s of live segment traffic
Empty filter shows every captured packet.
No.TimeSourceDestination ProtoLenInfo
No packets yet. Press Start capture.

Packet details

Select a packet above to inspect its fields.

Lab worksheet

Tasks — auto-check as you work

    Questions

    Hover-expand the Address Resolution Protocol node in the details pane to read field values.

    Score 0 / 9

    Use a made-up handle — no real names. Your instructor maps callsigns to students on a separate roster.