The MAC flooding attack
MAC flooding entails flooding the switch with a large number of requests. Content Addressable Memory (CAM) separates a switch from a hub. It stores information, such as the MAC address of the connected devices with the physical port number. Every MAC in a CAM table is assigned a switch port number. With this information, the switch knows where to send Ethernet frames. The size of the CAM tables is fixed. You might wonder what happens when the CAM tables get a large number of requests. In such a case, the switch turns into a hub, and the incoming frames are flooded out on all ports, giving the attacker access to network communication.
How the switch uses the CAM tables
The switch learns the MAC address of the connected device with its physical port, and writes that entry in the CAM table, as shown in the following diagram:

CAM table learning activity
The preceding diagram is divided into two parts. In the first part, the computer with MAC A sends the ARP packet to the...