Home▸Cybersecurity▸ARP Spoofing vs. Dynamic ARP Inspection

ARP Spoofing vs. Dynamic ARP Inspection

Interactive LAN simulator: watch an attacker poison a client's ARP cache to hijack gateway traffic, then flip on Dynamic ARP Inspection and see the switch drop every forged reply against its DHCP-snooping binding table.

Cybersecurity3DModerate60 FPS

ARP has no built-in authentication, which is exactly what makes cache poisoning possible: a rogue host on the LAN broadcasts a forged reply claiming to own the gateway's IP address, and every switch on the segment faithfully forwards traffic to whatever MAC the client's cache currently believes — including the attacker's own port. This simulator renders a real switched LAN in 3D, lets you launch that attack at a rate you control, and shows the client's cache and its live traffic path flip from the gateway to the attacker in real time. Flip on Dynamic ARP Inspection and watch the mechanism flip back: every forged reply is checked against the switch's DHCP-snooping binding table and dropped at ingress before it can ever touch the client's cache, with a live counter of blocked packets and intercepted traffic to make the defense's effect measurable, not just claimed.

⚙ Under the hood

Watch an attacker poison a client's ARP cache to hijack gateway traffic on a switched LAN, then enable Dynamic ARP Inspection and see the switch drop every forged reply against its DHCP-snooping binding table.

network securityARP spoofingman-in-the-middleswitchingDHCP snoopingLAN

3D · Three.js / WebGL renderer · 60 FPS target · runs fully client-side, no install