Identify the network activity shown below;

A host sweep generates ARP requests or ICMP probes sent sequentially across subnet IP addresses to discover live hosts, producing a request-based pattern rather than forged ARP replies claiming an existing host's identity.

CAM table flooding requires sending frames with large numbers of unique spoofed source MAC addresses to overflow the switch's forwarding table and force broadcast behavior, which is structurally different from ARP reply manipulation targeting a single IP.

Wireless client disassociation sends forged IEEE 802.11 deauthentication frames to disconnect clients from an access point and is specific to wireless networks, not Ethernet-layer ARP traffic.

In an ARP spoofing attack, the attacker sends unsolicited ARP reply packets that associate their MAC address with the IP address of the default gateway, causing LAN hosts to forward outbound traffic to the attacker instead of the legitimate router. This positions the attacker as a man-in-the-middle capable of intercepting, inspecting, or modifying traffic. The telltale pattern is repeated gratuitous ARP replies from a MAC address that does not match the legitimate gateway's recorded binding.