Operation OPER

Network 2 octets ARP packet unverified

Whether this is the question or the answer.

Reading a capture

A request is broadcast and a reply is unicast, which is visible one lane up: the request's Address 1 is all ones, and the reply's is the address the request came from.

Values

Value	Meaning
1	Request
2	Reply

Bit values written MSB first, matching network byte order.

Where it sits

ARP Packet > Operation

Open in the explorer — ARP request in a QoS Data frame

Accuracy

Clause: RFC 826
Byte order: big-endian — network byte order
Verified: Not verified against the standard. Treat this as a claim, not a fact.