InvalidARPMessages

• ARP packets breaking one of the rules behind ARPPacketCategories: an Ethernet src or Sender MAC that isn’t unicast, a blank Ethernet dst, a zero IP that the opcode rules out, or an opcode other than request or reply, or a Sender or Target IP that is broadcast, multicast or loopback
• A packet breaking more than one rule is counted as the first it breaks, but fits them all
• Shapes:
  • BlankEthernetDestinationMAC
  • InvalidARPIP
  • InvalidARPSenderMAC
  • InvalidEthernetSourceMAC
  • UnusualARPOpCode
  • ZeroIPsARPPacket
  • ZeroSenderIPARPReply
  • ZeroTargetIPARPRequest