Concepts / Ethernet and ARP

Ethernet and ARP

Ethernet frame

Also called frame, ethertype

The envelope a packet travels in across one link: destination MAC, source MAC, type, payload.

A 14-byte header: destination and source MAC addresses, then the ethertype naming the payload (0x0800 IPv4, 0x0806 ARP, 0x8100 a VLAN tag). tcpdump -e prints it. The frame is rebuilt at every router; only its payload, the IP packet, travels end to end.

See it on real machines

Learn it on real machines.

Every lab is a small network of real Linux machines in your browser. Start with a free account: Google or email, no card.

Start this lab, free