Victim PC
IP192.168.1.10
MACAA:AA:AA:AA
ARP Cache
192.168.1.1 RR:RR:RR:RR
Switch
Gateway (Router)
IP192.168.1.1
MACRR:RR:RR:RR
ARP Cache
192.168.1.10 AA:AA:AA:AA
Attacker
IP192.168.1.99
MACEE:EE:EE:EE
Network Defense Logs
[SYS]
Network active. ARP caches are in their legitimate state.