ARP概念及攻击与防护的原理(国外英语资料).doc

ARP概念及攻击与防护的原理(国外英语资料) ARP concepts and principles of attack and protection Recently, I often saw the problem of ARP virus on the forum, so I searched the ARP keyword on Google, and there was a lot of discussion about this kind of problem. Oh, I thirst for knowledge is very strong, I would like to learn ARP related knowledge, so the current network of common ARP problems carried out a summary. 1. ARP concept Before we talk about ARP, we must first know the concept and working principle of ARP, understand the principles of knowledge, in order to better face and analyze the problem. 1.1. ARP conceptual knowledge ARP, the full name Address Resolution Protocol, is called address resolution protocol in Chinese. It works on data link layer, connects with hardware interface in this layer, and provides service to upper layer. IP packets are often sent over Ethernet, and Ethernet devices do not recognize 32 bit IP addresses, which transmit Ethernet packets at 48 bit Ethernet addresses. Therefore, the destination address of IP must be converted to Ethernet destination address. In Ethernet, a host communicates directly with another host, and the MAC address of the target host must be known. But how do you get the MAC address for this target? It is obtained by address resolution protocol. ARP protocol is used to resolve the IP address of the network as the hardware address (MAC address), so as to ensure the smooth progress of communication. 1.2 ARP working principle First, each host sets up a ARP list in its own ARP buffer to represent the corresponding relationship between the IP address and the MAC address. When the source host will need a packet to be sent to the destination host, will first check whether the IP address and MAC address, your ARP list if there is, just to send packets to the MAC address; if not, it launched to the local network of a ARP request broadcast packets query the MAC address corresponding to the destination host. This ARP request packet contains the