11-Networking Continued: Layer 1 - When I refered to layer 0 in the last podcast, I meant layer 1 - oops - sorry - I said i wasn't going to talk about layer 1 anymore, but I changed my mind! - Most of layer 1 we don't care about - One thing we do care about - ARP - Address Resolution Protocol - Mapping between MAC Addresses and IP addresses - OLD - thus, no security - All IP traffic is sent around by MAC Addresses - Whenever a machine needs to talk to another machine, it says to every machine on the network: - Hi, i am this MAC Address, and i would like to know which MAC address has the IP address xxx.xxx.xxx.xxx - All the machines look at the packet, and say, Nope. not me - Except the one that does have that IP address - it responds saying: - I am this MAC address, and My IP address is xxx.xxx.xxx.xxx - The original machine then makes an entry into an ARP table, and maps that IP address to that MAC address - Then whenever it needs to send information to that IP address, it looks into that table, and sends it to that MAC Address - At no point is there any security in this process - ARP Poison Routing - Makes open wifi very dangerous - Sends out a packet saying - Hi, I am this MAC Address, and i have the IP address of the router - thus all the traffic that would go to the router gets passed thru this machine - both incoming and outgoing - Anything unencrypted they can see - Commands - tcpdump - prints all network traffic - with their protocol - need root access - arp -a - shows the ARP table - which mappings the computer has - Bart Busschots - bartb.ie - impodcast.tv - podfeet.com