基于WinPcap实现对ARP欺骗的检测和恢复  

ARP spoofing detection and recovery based on WinPcap

作　　者：陈辉[1] 陶洋[1] 

机构地区：[1]重庆邮电学院软件技术中心,重庆400065

出　　处：《计算机应用》2004年第10期67-68,85,共3页journal of Computer Applications

摘　　要：在分析ARP欺骗实现原理的基础上,提出一种网络级的检测与恢复方法,并基于WinPcap实现了这种方案。这种方法与以往基于主机的检测方法相比,可避免网络内部所有主机重复安装,具有占用系统资源小、实现简单、便于移植的优点,能够有效地消除网络上存在的ARP欺骗。The principle of the ARP Spoofing was analyzed,a scheme of detecting and restoring ARP Spoofing was provided,and this method was implemented by WinPcap. Compared with other methods,this method could avoid installing repeatedly and had the advantage of saving system resource,designing and replanting simply. It could detect and remove ARP Spoofing on the network effectively.

关 键 词：ARP欺骗 地址映射 WINPCAP 混杂模式 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]