InvalidEthernetSourceMAC

• Invalid: Ethernet src can’t be ff:ff:ff:ff:ff:ff or 00:00:00:00:00:00
• Rows here can also break:
  • BlankEthernetDestinationMAC
  • InvalidARPSenderMAC
  • ZeroIPsARPPacket
  • ZeroSenderIPARPReply
  • ZeroTargetIPARPRequest
  • UnusualARPOpCode
• Rows:
  • ARPFieldComboRow181-ARPFieldComboRow450
  • ARPFieldComboRow631-ARPFieldComboRow900
  • ARPFieldComboRow1081-ARPFieldComboRow1350
• Profile:
  • Ethernet src = not unicast
  • Ethernet type = 0x0806 (ARP)
  • Valid = no
• BPF filter: arp and (ether src ff:ff:ff:ff:ff:ff or ether src 00:00:00:00:00:00)
• Wireshark display filter: arp && (eth.src == ff:ff:ff:ff:ff:ff || eth.src == 00:00:00:00:00:00)