ARP最终处理计划(国外英文资料).doc

ARP终极解决方案 This function will always detect IP network if there is a PC as table. You can set the main IP into the testing form, for example, routers, servers, such as need machines access Intranet IP. (complementary) ARP cheat record how to understand: Time : when you find the problem; Sender : the IP or MAC that sends a cheat message; Repeat : the number of fraudulent messages sent; ARP info : refers to the specific content of sending a deceptive message. Time sender Repeat ARP info 192.168.1.22 1433 192.168.1.1 is at 00:0e: 03:22:02: e8 The meaning of the message is: at the 22:22:22 time, detected by 192.168.1.22 cheating information, has sent 1433 times, he sent by cheating information content is: MAC address 192.168.1.1 is 00:0 e: 03:22:02: e8. Turn on the detection function, and if there is a cheat on the IP in the table, there will be a hint. You can look at the source of the ARP deception on the Intranet. Note that any machine can impersonate other machines to send IP and MAC, so it may not be 100% accurate even if an IP or MAC is prompted to send a cheat message. Please do not solve certain problems with violence. 3. Active maintenance (quick fix) This feature can directly address the problem of ARP cheating, but its not ideal. His principle is the correct MAC address of IP that is broadcast over the network. The set up maintenance object table is the IP that needs to be protected. A packet frequency is how many correct packets are sent per second to all the machines in the network. It is strongly recommended that you broadcast IP as little as possible, as little as possible. Generally set one can, if there is no binding IP, ARP cheat, can be set up to 50-100 times, if have dropped to set a higher, namely can realize rapid solution to the problem of ARP deception. But to really solve the ARP problem, refer to the above binding method. 4. Xin is logging to the router Collect the system log for the router, etc. 5. caught The Internet cafe rarely touches the p