In ARP spoofing, the victim broadcasts to MAC
ff:ff:ff:ff:ff:ff asking for MAC address of router IP. The attacker can respond with his own MAC, but the router responds with its MAC!
If I try "man in the middle", my MAC (attacker) is always accepted, which means the router MAC was rejected. Why?
My guess is that the attacker response is faster. If true or false, how or why?