Glossary: Security Operations and Incident Response

ARP poisoning

Also written: ARP spoofing

An attack that sends fake ARP replies to machines on the same local segment, so traffic meant for another device goes to the attacker. It never crosses a router, so an edge firewall's log does not show it.