ARP Spoofing & Abnormality Detection

Inspect the ARP_Poison.pcapng file, part of this module’s resources, and submit the total count of ARP requests (opcode 1) that originated from the address 08:00:27:53:0c:ba as your answer.
Having issues with this question above.
I’ve downloaded the pcap file have run various queries and pretty sure I have the correct answer. I wanted to know if this may be a format issue with this question. I am entering just the number, is there anything else I should be entering?

Look at the packets displayed near the bottom right, not the last packet’s number.

2 Likes