Frames captured at 192.168.1.120 (00:00:39:fb:36:c2) upon doing: >ping 192.168.1.11 ********************************************************************* Frame: 42 bytes ARP broadcast from .120 Ethernet: 14B [Preamble, SFD, FCS not shown] * Destination: Broadcast (ff:ff:ff:ff:ff:ff) Source: 00:00:39:fb:36:c2 * Type: ARP (0x0806) Address Resolution Protocol (Request) {in the frame's Data field} Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 * Opcode: request (0x0001) Sender MAC address: 00:00:39:fb:36:c2 Sender IP address: 192.168.1.120 Target MAC address: 00:00:00_00:00:00 * Target IP address: 192.168.1.11 "Who is 192.168.1.11?" ********************************************************************* Frame: 60 bytes ARP response from .11 Ethernet: * Destination: 00:00:39:fb:36:c2 * Source: 00:08:74:fd:ac:a7 * Type: ARP (0x0806) Trailer: 000000000000000000000000000000000000 [???] Address Resolution Protocol (Reply) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: reply (0x0002) * Sender MAC address: 00:08:74:fd:ac:a7 "this is my MAC address" Sender IP address: 192.168.1.11 Target MAC address: 00:00:39:fb:36:c2 Target IP address: 192.168.1.120 ********************************************************************* Frame: 74 bytes Now the first ping from .120 to .11 ICMP Echo Request Ethernet: Destination: 00:08:74:fd:ac:a7 Source: 00:00:39:fb:36:c2 * Type: IP (0x0800) Internet Protocol: [in the frame's Data field] Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 Total Length: 60 Identification: 0x0324 (804) Flags: 0x00 Fragment offset: 0 Time to live: 128 * Protocol: ICMP (1) Header checksum: 0xb3c9 {correct} * Source: 192.168.1.120 * Destination: 192.168.1.11 Internet Control Message Protocol: {in IP packet's Data field} * Type: 8 (Echo (ping) request) * Code: 0 Checksum: 0x1e5c {corret} Identifier: 0x0200 {in ICMP's Data field} Sequence number: 11520 (0x2d00) Data (32 bytes) abcdefghijklmnopqrstuvwabcdefghi {dummy data} ********************************************************************* Frame: 74 bytes Return the ICMP Echo Reply to .120 Ethernet: Destination: 00:00:39:fb:36:c2 Source: 00:08:74:fd:ac:a7 * Type: IP (0x0800) Internet Protocol: Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 Total Length: 60 Identification: 0x09cf (2511) Flags: 0x00 Fragment offset: 0 Time to live: 128 * Protocol: ICMP (1) Header checksum: 0xad1e {correct} * Source: 192.168.1.11 * Destination: 192.168.1.120 Internet Control Message Protocol: * Type: 0 (Echo (ping) reply) * Code: 0 Checksum: 0x265c {correct} Identifier: 0x0200 Sequence number: 11520 (0x2d00) Data (32 bytes) abcdefghijklmnopqrstuvwabcdefghi {return that dummy data?}