During gratuitous ARP (GARP) attacks, an attacker sends unrequested ARP replies to certain targets or to all the IT systems in the same sub-network. In these forged ARP replies, the attacker enters their MAC address as an assignment to a third-party IP address and induces the target to change their ARP table in such a way that the network traffic will then be sent to the attacker instead of its valid destination. As a consequence, the attacker may record or manipulate the communication between the targets.