LAN Technologies - MAC Address Table and Gratuitous ARP

Classification of MAC Address Entries

• Dynamic MAC address entries
• Static MAC address entries
• Blackhole MAC address entries

Classification of secure MAC address

• Secure dynamic MAC address
• Secure static MAC address
• Sticky MAC address

Configuring MAC Address Anti-flapping

• Increases the MAC address learning priority of an interface.
• Prohibits MAC address entry overriding between interfaces with the same priority.

Gratuitous ARP functions:

• Checks for IP address conflicts
• Advertises a new MAC address
• Notifies other devices of master/backup switchover in a Virtual Router Redundancy Protocol (VRRP) group

Source: https://ilearningx.huawei.com/

OSQUERY - Networking Tables

How many network interfaces are present on the machine?
osquery> select * from interface_addresses;

How many DNS servers are configured on the machine?
osquery> select * from dns_resolvers;

208.67.222.222 belongs to OpenDNS.

Which interface is acting as the default gateway for the machine?
osquery> select * from routes;

How many entries are there in the ARP cache?
osquery> select * from arp_cache;

What is the given hostname of the machine?
osquery> select * from etc_hosts;

Source:https://www.attackdefense.com/challengedetails?cid=1044