Module arp 

Available on crate feature arp only.

ARP (Address Resolution Protocol) parser.

Gated by the arp feature. Parses Ethernet/IPv4 ARP messages (EtherType 0x0806) into a strongly-typed ArpMessage for visibility and spoof-detection consumers.

Pairs with crate::correlate::NeighborTable (always-on since 0.17) for IP→MAC binding tracking and change detection.

Issue #1 (0.17).

Structs

ArpMessage

One parsed ARP message.

ArpParser

Stateless ARP “parser” tag — provided so consumers wiring up arp_slots / event hooks can pass it as a marker. Calling parse / parse_frame directly is also fully supported.

Enums

ArpOp

ARP operation code.

ParseError

Failure mode for the parse* functions (issue #85).

Constants

ARP_ETHERTYPE

EtherType for ARP.

Functions

parse

Parse an ARP payload (no Ethernet header).

parse_frame

Parse an Ethernet frame whose EtherType is ARP (0x0806).