ARP

ARP lets devices on a local network discover which hardware MAC address belongs to a given IP address. It has no authentication, so an attacker on the same LAN can send forged replies, a trick called ARP spoofing, to intercept other people's traffic. Switch features like dynamic ARP inspection exist specifically to counter this.