ARP

Request the MAC address of an host with a IP address.

  • Request: in the display filter, enter arp.opcode==1
  • Replay: in the display filter, enter arp.opcode==2

Looking for the vendor according to the MAC address: AdminSubnet(https://www.adminsub.net/mac-address-finder/)

To filter the packets by MAC address:

arp.dst.hw==xx:xx:xx:xx:xx:xx

To filter the packets by source IP address:

arp.src.proto_ipv4==xxx.xxx.xxx.xxx

To filter the packet not your Mac address:

right click the Mac address of your host, then right click > filter > not selected.

ARP on host machine

In windows cmd, arp -a will list all the arp cache, arp -d can be used to delete the a single arp cache entry.

Reference:

http://www.iana.org/assignments/dns-parameters/dns-parameters.xhtml