# What is ARP, and what is ARP spoofing?

ARP (Address Resolution Protocol) is how devices on a local network find the hardware address that belongs to an IP address, for example to deliver traffic to the router. Because ARP trusts whatever answer arrives, an attacker on the same network can send false answers and pretend to be the router or another device. This is ARP spoofing, and it lets the attacker read or alter traffic passing through, a form of man-in-the-middle attack. Managed switches have protections against it. NetSenX raises ARP spoofing alerts from the Pro plan, on segments it monitors.

FAQ: [What is…? Network and security terms](https://netsenx.com/en/faq/glossary) · https://netsenx.com/en/faq/what-is-arp-and-arp-spoofing

## Read next

- https://netsenx.com/en/what-is-ndr
- https://netsenx.com/en/problems-we-solve

## Related questions

- [What are TCP and UDP?](https://netsenx.com/en/faq/what-is-tcp-and-udp)
- [What are ICMP and ping?](https://netsenx.com/en/faq/what-is-icmp-and-ping)
- [What is SMB, the file-sharing protocol?](https://netsenx.com/en/faq/what-is-the-smb-file-sharing-protocol)
- [What is a domain controller?](https://netsenx.com/en/faq/what-is-a-domain-controller)
- [What is NTP, and why does correct time matter for security?](https://netsenx.com/en/faq/what-is-ntp-and-why-does-time-matter-for-security)