Connectivity diagram of setup to capture packets using TCP dump, to capture the MAC address table building process

Interface configs and VLAN 202 on interface Gi 1/0/1 connected to PC1, Gi 1/0/2 connected to PC2 and port mirroring of VLAN 202 on interface Go 1/0/8


IP configs on PC1

IP configs on PC2

Initially there are no MAC addresses learnt in the MAC address table

When We try to ping from PC1 to PC2, ARP request is generated for destination IP and the reply is generated, during this process the source MAC addresses are recorded against interfaces and MAC table is built

We finally see MAC address to port mapping on the switch

Similarly, we don’t see anything in ARP cache

When we try to ping from switch to PC1

When we try to ping, we see 1st packet being dropped to discover MAC to IP mapping by ARP protocol and then ping gets successful and we finally see ARP entry
