以太网中基于Linux的ARP欺骗及其防范措施  

ARP's Poofing and Dependences Based on Linux within Ethernet

作　　者：郑燕生[1] 吴金龙[1] 

机构地区：[1]华侨大学信息科学与工程学院,福建泉州362021

出　　处：《宿州学院学报》2005年第4期70-73,共4页Journal of Suzhou University

摘　　要：本文首先探讨了ARP协议的特性和两个方向的地址解析问题,以及这种特性引起的在局域网中进行ARP欺骗的可能性并对两种可能的ARP欺骗攻击进行详细说明,然后给出实现这两种欺骗的程序框架。最后探讨了在以太网中如何防范ARP欺骗,给出四种防范措施,以及在发生了ARP欺骗之后如何检测出ARP欺骗的源头。The paper first discusses the characteristics of ARP protocol and the problem of analyzing dual-direction address resolution,then it further points out and explains in detail the possibility of cheating with ARP within the LAN due to its characteristics.Furthermore it demonstrates the program frame of these two kinds of poofing,and explains some of its key functions.In the end,the paper also presents four measures of the ARP's poofing in the Ethernet as well as ways to detect the origins of the ARP's cheating.

关 键 词：ARP欺骗 地址解析 套接口 动态映射 混杂模式 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]