2. 2

3. 3

4. 4

5. 5

6. DNS
Root DNS
6

7. 7

8. src IP: 1.2.3.4 dst IP: 1.2.3.4
IP: 1.2.3.4
reply
8

9. src IP: 1.2.3.4 dst IP: 1.2.3.4
IP: 1.2.3.4
reply
9

10. 10

11. ARP REQ
11

12. gateway
ip: 1.1.1.1
mac: aa.aa.aa.aa.aa.aa
user
ip: 1.1.1.16
mac: bb.bb.bb.bb.bb.bb
who has 1.1.1.1?
I am 1.1.1.16
I am 1.1.1.1
attaker
ip: 1.1.1.12
mac: cc.cc.cc.cc.cc.cc
12

13. 13

14. http://lcamtuf.coredump.cx/oldtcp/tcpseq/pri
nt.html#tcpseq
14