Address Resolution Protocol (ARP) maps IP addresses to MAC addresses and provides the most efficient path for data transmission. ARP broadcasts are permitted to freely roam around the network. The PenTester can take advantage of this by sending spoofed messages onto the network and associating their MAC address with the default gateway. As a result, the target machines will send their packets to the PenTester instead of the actual gateway.