ARP病毒原理分析  

Principle of ARP Virus

作　　者：王玉宝[1] WANG Yu-bao （Linyi People＇s Hospital of Shan Dong, Linyi 276003, China）

机构地区：[1]山东省临沂市人民医院,山东临沂276003

出　　处：《电脑知识与技术》2007年第9期1268-1269,共2页Computer Knowledge and Technology

摘　　要：ARP（Address Resolution Protocol）地址解析协议用于将计算机的网络IP地址转化为物理MAC地址。ARP病毒是一种地址欺骗的病毒,ARP病毒通过伪造IP地址和MAC地址实现ARP欺骗,进行ARP重定向和嗅探攻击,用伪造源MAC地址发送ARP响应包,网内PC机的ARP缓存表混乱,网络中产生大量的ARP通信量使网络阻塞。ARP攻击在现今的网络中频频出现,有效的防范ARP形式的网络攻击已成为确保网络畅通必要条件。本文对ARP病毒的攻击原理做了详细的探讨和分析。The Address Resolution Protocol uses in the computer network IP address transforming as the physical MAC address. The ARP virus is one kind of address deceit virus, the ARP virus realizes the AR_P deceit through the forge IP address and the MAC address, carries on the AR_P heavy direction detection and smells searches the attack, transmits the ARP response package with the forge source MAC address, in the net the PC machine ARP buffer table is chaotic, in the network has the massive ARP communication load to cause network blocking. The ARP attack appears repeatedly in the nowadays network, the effective guard ARP form network attack has become guarantees the network unimpeded essential condition.This article has made the detailed discussion and the analysis to the ARP virus＇s attack principle.

关 键 词：地址 ARP缓存表 中间人攻击 

分 类 号：TP393[自动化与计算机技术—计算机应用技术;自动化与计算机技术—计算机科学与技术]